CVE-2010-4471
Summary
| CVE | CVE-2010-4471 |
|---|---|
| State | PUBLISHED |
| Assigner | oracle |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-02-17 19:00:01 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to 2D. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is related to the exposure of system properties via vectors related to Font.createFont and exception text. |
Risk And Classification
Primary CVSS: v2.0 5 from [email protected]
AV:N/AC:L/Au:N/C:P/I:N/A:N
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:N/AC:L/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Sun | Jdk | 1.5.0 | All | All | All |
| Application | Sun | Jdk | 1.5.0 | update1 | All | All |
| Application | Sun | Jdk | 1.5.0 | update10 | All | All |
| Application | Sun | Jdk | 1.5.0 | update11 | All | All |
| Application | Sun | Jdk | 1.5.0 | update12 | All | All |
| Application | Sun | Jdk | 1.5.0 | update13 | All | All |
| Application | Sun | Jdk | 1.5.0 | update14 | All | All |
| Application | Sun | Jdk | 1.5.0 | update15 | All | All |
| Application | Sun | Jdk | 1.5.0 | update16 | All | All |
| Application | Sun | Jdk | 1.5.0 | update17 | All | All |
| Application | Sun | Jdk | 1.5.0 | update18 | All | All |
| Application | Sun | Jdk | 1.5.0 | update19 | All | All |
| Application | Sun | Jdk | 1.5.0 | update2 | All | All |
| Application | Sun | Jdk | 1.5.0 | update20 | All | All |
| Application | Sun | Jdk | 1.5.0 | update21 | All | All |
| Application | Sun | Jdk | 1.5.0 | update22 | All | All |
| Application | Sun | Jdk | 1.5.0 | update23 | All | All |
| Application | Sun | Jdk | 1.5.0 | update24 | All | All |
| Application | Sun | Jdk | 1.5.0 | update25 | All | All |
| Application | Sun | Jdk | 1.5.0 | update26 | All | All |
| Application | Sun | Jdk | 1.5.0 | update3 | All | All |
| Application | Sun | Jdk | 1.5.0 | update4 | All | All |
| Application | Sun | Jdk | 1.5.0 | update5 | All | All |
| Application | Sun | Jdk | 1.5.0 | update6 | All | All |
| Application | Sun | Jdk | 1.5.0 | update7 | All | All |
| Application | Sun | Jdk | 1.5.0 | update8 | All | All |
| Application | Sun | Jdk | 1.5.0 | update9 | All | All |
| Application | Sun | Jdk | 1.6.0 | All | All | All |
| Application | Sun | Jdk | 1.6.0 | update1 | All | All |
| Application | Sun | Jdk | 1.6.0 | update1_b06 | All | All |
| Application | Sun | Jdk | 1.6.0 | update2 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_10 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_11 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_12 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_13 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_14 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_15 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_16 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_17 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_18 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_19 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_20 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_21 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_22 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_3 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_4 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_5 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_6 | All | All |
| Application | Sun | Jdk | 1.6.0 | update_7 | All | All |
| Application | Sun | Jdk | All | update27 | All | All |
| Application | Sun | Jdk | All | update_23 | All | All |
| Application | Sun | Jre | 1.5.0 | All | All | All |
| Application | Sun | Jre | 1.5.0 | update1 | All | All |
| Application | Sun | Jre | 1.5.0 | update10 | All | All |
| Application | Sun | Jre | 1.5.0 | update11 | All | All |
| Application | Sun | Jre | 1.5.0 | update12 | All | All |
| Application | Sun | Jre | 1.5.0 | update13 | All | All |
| Application | Sun | Jre | 1.5.0 | update14 | All | All |
| Application | Sun | Jre | 1.5.0 | update15 | All | All |
| Application | Sun | Jre | 1.5.0 | update16 | All | All |
| Application | Sun | Jre | 1.5.0 | update17 | All | All |
| Application | Sun | Jre | 1.5.0 | update18 | All | All |
| Application | Sun | Jre | 1.5.0 | update19 | All | All |
| Application | Sun | Jre | 1.5.0 | update2 | All | All |
| Application | Sun | Jre | 1.5.0 | update20 | All | All |
| Application | Sun | Jre | 1.5.0 | update21 | All | All |
| Application | Sun | Jre | 1.5.0 | update22 | All | All |
| Application | Sun | Jre | 1.5.0 | update23 | All | All |
| Application | Sun | Jre | 1.5.0 | update24 | All | All |
| Application | Sun | Jre | 1.5.0 | update25 | All | All |
| Application | Sun | Jre | 1.5.0 | update26 | All | All |
| Application | Sun | Jre | 1.5.0 | update3 | All | All |
| Application | Sun | Jre | 1.5.0 | update4 | All | All |
| Application | Sun | Jre | 1.5.0 | update5 | All | All |
| Application | Sun | Jre | 1.5.0 | update6 | All | All |
| Application | Sun | Jre | 1.5.0 | update7 | All | All |
| Application | Sun | Jre | 1.5.0 | update8 | All | All |
| Application | Sun | Jre | 1.5.0 | update9 | All | All |
| Application | Sun | Jre | 1.6.0 | All | All | All |
| Application | Sun | Jre | 1.6.0 | update_1 | All | All |
| Application | Sun | Jre | 1.6.0 | update_10 | All | All |
| Application | Sun | Jre | 1.6.0 | update_11 | All | All |
| Application | Sun | Jre | 1.6.0 | update_12 | All | All |
| Application | Sun | Jre | 1.6.0 | update_13 | All | All |
| Application | Sun | Jre | 1.6.0 | update_14 | All | All |
| Application | Sun | Jre | 1.6.0 | update_15 | All | All |
| Application | Sun | Jre | 1.6.0 | update_16 | All | All |
| Application | Sun | Jre | 1.6.0 | update_17 | All | All |
| Application | Sun | Jre | 1.6.0 | update_18 | All | All |
| Application | Sun | Jre | 1.6.0 | update_19 | All | All |
| Application | Sun | Jre | 1.6.0 | update_2 | All | All |
| Application | Sun | Jre | 1.6.0 | update_20 | All | All |
| Application | Sun | Jre | 1.6.0 | update_21 | All | All |
| Application | Sun | Jre | 1.6.0 | update_22 | All | All |
| Application | Sun | Jre | 1.6.0 | update_3 | All | All |
| Application | Sun | Jre | 1.6.0 | update_4 | All | All |
| Application | Sun | Jre | 1.6.0 | update_5 | All | All |
| Application | Sun | Jre | 1.6.0 | update_6 | All | All |
| Application | Sun | Jre | 1.6.0 | update_7 | All | All |
| Application | Sun | Jre | All | update27 | All | All |
| Application | Sun | Jre | All | update_23 | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Debian -- Security Information -- DSA-2224-1 openjdk-6 | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| Red Hat update for java-1.6.0-ibm - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| Oracle Java SE and Java for Business Critical Patch Update Advisory - February 2011 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Patch, Vendor Advisory |
| [SECURITY] Fedora 14 Update: java-1.6.0-openjdk-1.6.0.0-52.1.9.7.fc14 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| access.redhat.com | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | Vendor Advisory |
| Support | Red Hat | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | Vendor Advisory |
| '[security bulletin] HPSBMU02799 SSRT100867 rev.1 - HP Network Node Manager i (NNMi) v9.0x Running JD' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| Security Advisories | Mandriva Linux | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| [SECURITY] Fedora 13 Update: java-1.6.0-openjdk-1.6.0.0-50.1.8.7.fc13 | af854a3a-2127-422b-91ae-364da2661108 | lists.fedoraproject.org | |
| Gentoo Linux Documentation -- IcedTea JDK: Multiple vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| Oracle Java SE and Java for Business CVE-2010-4471 Remote Security Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Multiple Vulnerabilities in Cosminexus: Software Vulnerability Information: Software: Hitachi | af854a3a-2127-422b-91ae-364da2661108 | www.hitachi.co.jp | |
| '[security bulletin] HPSBMU02797 SSRT100867 rev.1 - HP Network Node Manager i (NNMi) v9.1x Running JD' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| Fedora update for java-1.6.0-openjdk - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| cpuapr2011 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.