Every CVE Search/ Get API key

CVE-2010-0844

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update...

7.5 HighFix available

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to arbitrary memory.

Exploit likelihood

3.79%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to arbitrary memory.

Record
CVE-2010-0844
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to arbitrary memory.

Record
CVE-2010-0844
Updated
2026-11-02
EUVDEUVD-2010-0869 No score

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to arbitrary memory.

Record
EUVD-2010-0869
Updated
2026-11-03
GitHub AdvisoriesGHSA-gxc6-jrc3-x89v No score

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update...

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to arbitrary memory.

Record
GHSA-gxc6-jrc3-x89v
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
java-1.6.0-sun
Red Hat:rhel_extras:4
before 1:1.6.0.19-1jpp.1.el4
1:1.6.0.19-1jpp.1.el4
java-1.6.0-sun-demo
Red Hat:rhel_extras:4
before 1:1.6.0.19-1jpp.1.el4
1:1.6.0.19-1jpp.1.el4
java-1.6.0-sun-devel
Red Hat:rhel_extras:4
before 1:1.6.0.19-1jpp.1.el4
1:1.6.0.19-1jpp.1.el4
java-1.6.0-sun-jdbc
Red Hat:rhel_extras:4
before 1:1.6.0.19-1jpp.1.el4
1:1.6.0.19-1jpp.1.el4
java-1.6.0-sun-plugin
Red Hat:rhel_extras:4
before 1:1.6.0.19-1jpp.1.el4
1:1.6.0.19-1jpp.1.el4
java-1.6.0-sun-src
Red Hat:rhel_extras:4
before 1:1.6.0.19-1jpp.1.el4
1:1.6.0.19-1jpp.1.el4
java-1.6.0-sun
Red Hat:rhel_extras:5::client
before 1:1.6.0.19-1jpp.1.el5
1:1.6.0.19-1jpp.1.el5
java-1.6.0-sun-demo
Red Hat:rhel_extras:5::client
before 1:1.6.0.19-1jpp.1.el5
1:1.6.0.19-1jpp.1.el5
java-1.6.0-sun-devel
Red Hat:rhel_extras:5::client
before 1:1.6.0.19-1jpp.1.el5
1:1.6.0.19-1jpp.1.el5
java-1.6.0-sun-jdbc
Red Hat:rhel_extras:5::client
before 1:1.6.0.19-1jpp.1.el5
1:1.6.0.19-1jpp.1.el5
Show 100 moreShow less
Affected packages
PackageAffectedFixed
java-1.6.0-sun-plugin
Red Hat:rhel_extras:5::client
before 1:1.6.0.19-1jpp.1.el5
1:1.6.0.19-1jpp.1.el5
java-1.6.0-sun-src
Red Hat:rhel_extras:5::client
before 1:1.6.0.19-1jpp.1.el5
1:1.6.0.19-1jpp.1.el5
java-1.6.0-sun
Red Hat:rhel_extras:5::server
before 1:1.6.0.19-1jpp.1.el5
1:1.6.0.19-1jpp.1.el5
java-1.6.0-sun-demo
Red Hat:rhel_extras:5::server
before 1:1.6.0.19-1jpp.1.el5
1:1.6.0.19-1jpp.1.el5
java-1.6.0-sun-devel
Red Hat:rhel_extras:5::server
before 1:1.6.0.19-1jpp.1.el5
1:1.6.0.19-1jpp.1.el5
java-1.6.0-sun-jdbc
Red Hat:rhel_extras:5::server
before 1:1.6.0.19-1jpp.1.el5
1:1.6.0.19-1jpp.1.el5
java-1.6.0-sun-plugin
Red Hat:rhel_extras:5::server
before 1:1.6.0.19-1jpp.1.el5
1:1.6.0.19-1jpp.1.el5
java-1.6.0-sun-src
Red Hat:rhel_extras:5::server
before 1:1.6.0.19-1jpp.1.el5
1:1.6.0.19-1jpp.1.el5
java-1.5.0-sun-uninstall
Red Hat:rhel_extras:4.7.z
before 0:1.5.0.22-1jpp.3.el4
0:1.5.0.22-1jpp.3.el4
java-1.5.0-sun-uninstall
Red Hat:rhel_extras:4
before 0:1.5.0.22-1jpp.3.el4
0:1.5.0.22-1jpp.3.el4
java-1.5.0-sun-uninstall
Red Hat:rhel_extras:5::client
before 0:1.5.0.22-1jpp.3.el5
0:1.5.0.22-1jpp.3.el5
java-1.5.0-sun-uninstall
Red Hat:rhel_extras:5
before 0:1.5.0.22-1jpp.3.el5
0:1.5.0.22-1jpp.3.el5
java-1.5.0-sun-uninstall
Red Hat:rhel_extras:5::server
before 0:1.5.0.22-1jpp.3.el5
0:1.5.0.22-1jpp.3.el5
java-1.6.0-ibm
Red Hat:rhel_extras:4
before 1:1.6.0.8-1jpp.1.el4
1:1.6.0.8-1jpp.1.el4
java-1.6.0-ibm-demo
Red Hat:rhel_extras:4
before 1:1.6.0.8-1jpp.1.el4
1:1.6.0.8-1jpp.1.el4
java-1.6.0-ibm-devel
Red Hat:rhel_extras:4
before 1:1.6.0.8-1jpp.1.el4
1:1.6.0.8-1jpp.1.el4
java-1.6.0-ibm-javacomm
Red Hat:rhel_extras:4
before 1:1.6.0.8-1jpp.1.el4
1:1.6.0.8-1jpp.1.el4
java-1.6.0-ibm-jdbc
Red Hat:rhel_extras:4
before 1:1.6.0.8-1jpp.1.el4
1:1.6.0.8-1jpp.1.el4
java-1.6.0-ibm-plugin
Red Hat:rhel_extras:4
before 1:1.6.0.8-1jpp.1.el4
1:1.6.0.8-1jpp.1.el4
java-1.6.0-ibm-src
Red Hat:rhel_extras:4
before 1:1.6.0.8-1jpp.1.el4
1:1.6.0.8-1jpp.1.el4
java-1.6.0-ibm
Red Hat:rhel_extras:5::client
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-accessibility
Red Hat:rhel_extras:5::client
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-demo
Red Hat:rhel_extras:5::client
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-devel
Red Hat:rhel_extras:5::client
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-javacomm
Red Hat:rhel_extras:5::client
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-jdbc
Red Hat:rhel_extras:5::client
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-plugin
Red Hat:rhel_extras:5::client
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-src
Red Hat:rhel_extras:5::client
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm
Red Hat:rhel_extras:5::server
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-accessibility
Red Hat:rhel_extras:5::server
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-demo
Red Hat:rhel_extras:5::server
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-devel
Red Hat:rhel_extras:5::server
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-javacomm
Red Hat:rhel_extras:5::server
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-jdbc
Red Hat:rhel_extras:5::server
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-plugin
Red Hat:rhel_extras:5::server
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-src
Red Hat:rhel_extras:5::server
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm
Red Hat:network_satellite:5.3::el4
before 1:1.6.0.8-1jpp.1.el4
1:1.6.0.8-1jpp.1.el4
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.3::el4
before 1:1.6.0.8-1jpp.1.el4
1:1.6.0.8-1jpp.1.el4
java-1.6.0-ibm
Red Hat:network_satellite:5.3::el5
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.6.0-ibm-devel
Red Hat:network_satellite:5.3::el5
before 1:1.6.0.8-1jpp.1.el5
1:1.6.0.8-1jpp.1.el5
java-1.5.0-ibm
Red Hat:rhel_extras:4
before 1:1.5.0.11.2-1jpp.1.el4
1:1.5.0.11.2-1jpp.1.el4
java-1.5.0-ibm-demo
Red Hat:rhel_extras:4
before 1:1.5.0.11.2-1jpp.1.el4
1:1.5.0.11.2-1jpp.1.el4
java-1.5.0-ibm-devel
Red Hat:rhel_extras:4
before 1:1.5.0.11.2-1jpp.1.el4
1:1.5.0.11.2-1jpp.1.el4
java-1.5.0-ibm-javacomm
Red Hat:rhel_extras:4
before 1:1.5.0.11.2-1jpp.1.el4
1:1.5.0.11.2-1jpp.1.el4
java-1.5.0-ibm-jdbc
Red Hat:rhel_extras:4
before 1:1.5.0.11.2-1jpp.1.el4
1:1.5.0.11.2-1jpp.1.el4
java-1.5.0-ibm-plugin
Red Hat:rhel_extras:4
before 1:1.5.0.11.2-1jpp.1.el4
1:1.5.0.11.2-1jpp.1.el4
java-1.5.0-ibm-src
Red Hat:rhel_extras:4
before 1:1.5.0.11.2-1jpp.1.el4
1:1.5.0.11.2-1jpp.1.el4
java-1.5.0-ibm
Red Hat:rhel_extras:5::client
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-accessibility
Red Hat:rhel_extras:5::client
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-demo
Red Hat:rhel_extras:5::client
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-devel
Red Hat:rhel_extras:5::client
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-javacomm
Red Hat:rhel_extras:5::client
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-jdbc
Red Hat:rhel_extras:5::client
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-plugin
Red Hat:rhel_extras:5::client
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-src
Red Hat:rhel_extras:5::client
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm
Red Hat:rhel_extras:5::server
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-accessibility
Red Hat:rhel_extras:5::server
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-demo
Red Hat:rhel_extras:5::server
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-devel
Red Hat:rhel_extras:5::server
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-javacomm
Red Hat:rhel_extras:5::server
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-jdbc
Red Hat:rhel_extras:5::server
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-plugin
Red Hat:rhel_extras:5::server
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.5.0-ibm-src
Red Hat:rhel_extras:5::server
before 1:1.5.0.11.2-1jpp.1.el5
1:1.5.0.11.2-1jpp.1.el5
java-1.4.2-ibm
Red Hat:rhel_extras:3
before 0:1.4.2.13.5-1jpp.1.el3
0:1.4.2.13.5-1jpp.1.el3
java-1.4.2-ibm-demo
Red Hat:rhel_extras:3
before 0:1.4.2.13.5-1jpp.1.el3
0:1.4.2.13.5-1jpp.1.el3
java-1.4.2-ibm-devel
Red Hat:rhel_extras:3
before 0:1.4.2.13.5-1jpp.1.el3
0:1.4.2.13.5-1jpp.1.el3
java-1.4.2-ibm-jdbc
Red Hat:rhel_extras:3
before 0:1.4.2.13.5-1jpp.1.el3
0:1.4.2.13.5-1jpp.1.el3
java-1.4.2-ibm-plugin
Red Hat:rhel_extras:3
before 0:1.4.2.13.5-1jpp.1.el3
0:1.4.2.13.5-1jpp.1.el3
java-1.4.2-ibm-src
Red Hat:rhel_extras:3
before 0:1.4.2.13.5-1jpp.1.el3
0:1.4.2.13.5-1jpp.1.el3
java-1.4.2-ibm
Red Hat:rhel_extras:4
before 0:1.4.2.13.5-1jpp.1.el4
0:1.4.2.13.5-1jpp.1.el4
java-1.4.2-ibm-demo
Red Hat:rhel_extras:4
before 0:1.4.2.13.5-1jpp.1.el4
0:1.4.2.13.5-1jpp.1.el4
java-1.4.2-ibm-devel
Red Hat:rhel_extras:4
before 0:1.4.2.13.5-1jpp.1.el4
0:1.4.2.13.5-1jpp.1.el4
java-1.4.2-ibm-javacomm
Red Hat:rhel_extras:4
before 0:1.4.2.13.5-1jpp.1.el4
0:1.4.2.13.5-1jpp.1.el4
java-1.4.2-ibm-jdbc
Red Hat:rhel_extras:4
before 0:1.4.2.13.5-1jpp.1.el4
0:1.4.2.13.5-1jpp.1.el4
java-1.4.2-ibm-plugin
Red Hat:rhel_extras:4
before 0:1.4.2.13.5-1jpp.1.el4
0:1.4.2.13.5-1jpp.1.el4
java-1.4.2-ibm-src
Red Hat:rhel_extras:4
before 0:1.4.2.13.5-1jpp.1.el4
0:1.4.2.13.5-1jpp.1.el4
java-1.4.2-ibm
Red Hat:rhel_extras:5::client
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm-demo
Red Hat:rhel_extras:5::client
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm-devel
Red Hat:rhel_extras:5::client
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm-javacomm
Red Hat:rhel_extras:5::client
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm-jdbc
Red Hat:rhel_extras:5::client
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm-plugin
Red Hat:rhel_extras:5::client
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm-src
Red Hat:rhel_extras:5::client
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm
Red Hat:rhel_extras:5::server
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm-demo
Red Hat:rhel_extras:5::server
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm-devel
Red Hat:rhel_extras:5::server
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm-javacomm
Red Hat:rhel_extras:5::server
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm-jdbc
Red Hat:rhel_extras:5::server
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm-plugin
Red Hat:rhel_extras:5::server
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm-src
Red Hat:rhel_extras:5::server
before 0:1.4.2.13.5-1jpp.1.el5
0:1.4.2.13.5-1jpp.1.el5
java-1.4.2-ibm-sap
Red Hat:rhel_extras_sap:4
before 0:1.4.2.13.5.sap-1jpp.1.el4_8
0:1.4.2.13.5.sap-1jpp.1.el4_8
java-1.4.2-ibm-sap-demo
Red Hat:rhel_extras_sap:4
before 0:1.4.2.13.5.sap-1jpp.1.el4_8
0:1.4.2.13.5.sap-1jpp.1.el4_8
java-1.4.2-ibm-sap-devel
Red Hat:rhel_extras_sap:4
before 0:1.4.2.13.5.sap-1jpp.1.el4_8
0:1.4.2.13.5.sap-1jpp.1.el4_8
java-1.4.2-ibm-sap-javacomm
Red Hat:rhel_extras_sap:4
before 0:1.4.2.13.5.sap-1jpp.1.el4_8
0:1.4.2.13.5.sap-1jpp.1.el4_8
java-1.4.2-ibm-sap-src
Red Hat:rhel_extras_sap:4
before 0:1.4.2.13.5.sap-1jpp.1.el4_8
0:1.4.2.13.5.sap-1jpp.1.el4_8
java-1.4.2-ibm-sap
Red Hat:rhel_extras_sap:5
before 0:1.4.2.13.5.sap-1jpp.1.el5
0:1.4.2.13.5.sap-1jpp.1.el5
java-1.4.2-ibm-sap-demo
Red Hat:rhel_extras_sap:5
before 0:1.4.2.13.5.sap-1jpp.1.el5
0:1.4.2.13.5.sap-1jpp.1.el5
java-1.4.2-ibm-sap-devel
Red Hat:rhel_extras_sap:5
before 0:1.4.2.13.5.sap-1jpp.1.el5
0:1.4.2.13.5.sap-1jpp.1.el5
java-1.4.2-ibm-sap-javacomm
Red Hat:rhel_extras_sap:5
before 0:1.4.2.13.5.sap-1jpp.1.el5
0:1.4.2.13.5.sap-1jpp.1.el5
java-1.4.2-ibm-sap-src
Red Hat:rhel_extras_sap:5
before 0:1.4.2.13.5.sap-1jpp.1.el5
0:1.4.2.13.5.sap-1jpp.1.el5

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-0844 is a high vulnerability (CVSS 7.5) in Sun Jdk, published April 1, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.79%, the 90th percentile. Fixed in java-1.6.0-sun 1:1.6.0.19-1jpp.1.el4.

References

Show 149 moreShow less
MoveEnter Open