CVE-2010-3555
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6...
9.3 High
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that the ActiveX Plugin does not properly initialize an object field that is used as a window handle, which allows attackers to execute arbitrary code.
Exploit likelihood
7.97%Down 4.3 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that the ActiveX Plugin does not properly initialize an object field that is used as a window handle, which allows attackers to execute arbitrary code.
- Record
CVE-2010-3555- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that the ActiveX Plugin does not properly initialize an object field that is used as a window handle, which allows attackers to execute arbitrary code.
- Record
CVE-2010-3555- Updated
- 2026-11-02
EUVDEUVD-2010-3551 No score
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that the ActiveX Plugin does not properly initialize an object field that is used as a window handle, which allows attackers to execute arbitrary code.
- Record
EUVD-2010-3551- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f2gj-f7q5-jjg4 No score
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6...
Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that the ActiveX Plugin does not properly initialize an object field that is used as a window handle, which allows attackers to execute arbitrary code.
- Record
GHSA-f2gj-f7q5-jjg4- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el4 | 1:1.6.0.22-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el4 | 1:1.6.0.22-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el4 | 1:1.6.0.22-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el4 | 1:1.6.0.22-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el4 | 1:1.6.0.22-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el4 | 1:1.6.0.22-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
Show 40 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 29 CVEs |
before 1:1.6.0.22-1jpp.1.el5 | 1:1.6.0.22-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:4 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el4 | 1:1.6.0.9.0-1jpp.3.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el4 | 1:1.6.0.9.0-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el4 | 1:1.6.0.9.0-1jpp.3.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el4 | 1:1.6.0.9.0-1jpp.3.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el4 | 1:1.6.0.9.0-1jpp.3.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el4 | 1:1.6.0.9.0-1jpp.3.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el4 | 1:1.6.0.9.0-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.3.el5 | 1:1.6.0.9.0-1jpp.3.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:6 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.4.el6 | 1:1.6.0.9.0-1jpp.4.el6 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.4.el6 | 1:1.6.0.9.0-1jpp.4.el6 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.4.el6 | 1:1.6.0.9.0-1jpp.4.el6 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.4.el6 | 1:1.6.0.9.0-1jpp.4.el6 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.4.el6 | 1:1.6.0.9.0-1jpp.4.el6 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.4.el6 | 1:1.6.0.9.0-1jpp.4.el6 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 23 CVEs |
before 1:1.6.0.9.0-1jpp.4.el6 | 1:1.6.0.9.0-1jpp.4.el6 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el5 From an advisory covering 38 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el5 From an advisory covering 38 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3555 is a high vulnerability (CVSS 9.3) in Sun Jdk, published October 19, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.97%, the 94th percentile. No source names a fixed version.
References
support.avaya.com/css/P8/documents/100114315
marc.info?l=bugtraq&m=134254866602253&w=2
redhat.com/support/errata/RHSA-2010-0770.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12222
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c02616748
Show 194 moreShow less
zerodayinitiative.com/advisories/ZDI-10-207
securityfocus.com/bid/44038
secunia.com/advisories/44954
oracle.com/technetwork/topics/security/javacpuoct2010-176258.html
lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
nvd.nist.gov/vuln/detail/CVE-2010-3555
github.com/advisories/GHSA-f2gj-f7q5-jjg4
access.redhat.com/errata/RHSA-2010:0770
bugzilla.redhat.com/show_bug.cgi?id=533125
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0770.json
cve.org/CVERecord?id=CVE-2009-3555
ibm.com/developerworks/java/jdk/alerts
This page doesn't list everything
Left out here: 1 reference. The JSON record has them.