Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this involves an incorrect sign extension in the HeadspaceSoundbank.nGetName function, which allows attackers to execute arbitrary code via a crafted BANK record that leads to a buffer overflow.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: oracle

Published: 2010-10-19T21:00:00

Updated: 2018-10-10T18:57:01

Reserved: 2010-09-20T00:00:00


Link: CVE-2010-3559

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2010-10-19T22:00:03.157

Modified: 2018-10-30T16:26:21.390


Link: CVE-2010-3559

JSON object: View

cve-icon Redhat Information

No data.