CVE-2010-4450

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier for Solaris and Linux; 5.0 Update 27 and earlier for Solaris and Linux; and 1.4.2_29 and earlier for Solaris and Linux allows local standalone applications to affect confidentiality, integrity, and availability via unknown vectors related to Launcher. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is an untrusted search path vulnerability involving an empty LD_LIBRARY_PATH environment variable.

3.7

CVSS

Severity: Low

CVSS 2.0 •

EPSS 0.17%

Vendor Advisory fedoraproject.org Vendor Advisory gentoo.org Vendor Advisory marc.info Vendor Advisory fedoraproject.org Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory marc.info Vendor Advisory redhat.com Vendor Advisory mandriva.com Vendor Advisory secunia.com Vendor Advisory oracle.com Vendor Advisory oracle.com

Affected: n/a n/a

References

Link	Tags
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html	vendor advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html	patch vendor advisory
http://security.gentoo.org/glsa/glsa-201406-32.xml	vendor advisory
http://marc.info/?l=bugtraq&m=134254866602253&w=2	vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054134.html	vendor advisory
http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html	patch vendor advisory
http://dbhole.wordpress.com/2011/02/15/icedtea-web-1-0-1-released/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14135	vdb entry signature
http://www.securityfocus.com/bid/46397	vdb entry
http://secunia.com/advisories/43350	third party advisory vendor advisory
http://www.redhat.com/support/errata/RHSA-2011-0282.html	vendor advisory
http://www.debian.org/security/2011/dsa-2224	vendor advisory
http://marc.info/?l=bugtraq&m=134254957702612&w=2	vendor advisory
http://www.redhat.com/support/errata/RHSA-2011-0281.html	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65406	vdb entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12420	vdb entry signature
http://www.mandriva.com/security/advisories?name=MDVSA-2011:054	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2010-4450?: CVE-2010-4450 has been scored as a low severity vulnerability.
How to fix CVE-2010-4450?: To fix CVE-2010-4450, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2010-4450 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2010-4450 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.