CVE-2010-1423 : Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and

Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and other versions, when running on Windows and possibly on Linux, allows remote attackers to execute arbitrary code via the (1) -J or (2) -XXaltjvm argument to javaws.exe, which is processed by the launch method. NOTE: some of these details are obtained from third party information.

Published 2010-04-15 21:30:00

Updated 2022-05-13 14:52:59

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2010-1423

Oracle » JDK » Update Update19
Versions up to, including, (<=) 1.6.0
cpe:2.3:a:oracle:jdk:*:update19:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.6.0 Update Update10
cpe:2.3:a:oracle:jdk:1.6.0:update10:*:*:*:*:*:*
Matching versions
Oracle » JRE » Update Update19
Versions up to, including, (<=) 1.6.0
cpe:2.3:a:oracle:jre:*:update19:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.6.0 Update Update 10
cpe:2.3:a:oracle:jre:1.6.0:update_10:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2010-1423

Top countries where our scanners detected CVE-2010-1423

Top open port discovered on systems with this issue 90

IPs affected by CVE-2010-1423 936

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2010-1423!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2010-1423

EPSS FAQ

93.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2010-1423

Sun Java Web Start Plugin Command Line Argument Injection

Disclosure Date: 2010-04-09

First seen: 2020-04-26

exploit/windows/browser/java_ws_arginject_altjvm

This module exploits a flaw in the Web Start plugin component of Sun Java Web Start. The arguments passed to Java Web Start are not properly validated. By passing the lesser known -J option, an attacker can pass arbitrary options directly to the Java runtime. By ut

More information

CVSS scores for CVE-2010-1423

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2010-1423

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2010-1423

http://www.vupen.com/english/advisories/2010/0853

Webmail | OVH- OVH
Patch;Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14090

Repository / Oval Repository
http://www.reversemode.com/index.php?option=com_content&task=view&id=67&Itemid=1

401 Unauthorized
Exploit
http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/074036.html

[Full-Disclosure] Mailing List Charter
https://exchange.xforce.ibmcloud.com/vulnerabilities/57615

Sun JRE Java Deployment Toolkit command execution CVE-2010-1423 Vulnerability Report
http://www.kb.cert.org/vuls/id/886582

VU#886582 - Java Deployment Toolkit insufficient argument validation
US Government Resource
http://www.securitytracker.com/id?1023840

Sun JRE Java Deployment Toolkit Lets Remote Users Inject Arbitrary Commands - SecurityTracker

Jump to

Vulnerability Details : CVE-2010-1423