CVE-2010-4452
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle...
10.0 HighPublic exploit
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
Exploit likelihood
83.0%Up 2.4 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
- Record
CVE-2010-4452- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
- Record
CVE-2010-4452- Updated
- 2026-11-02
EUVDEUVD-2010-4421 No score
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
- Record
EUVD-2010-4421- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mq39-jwgr-3jxw No score
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle...
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
- Record
GHSA-mq39-jwgr-3jxw- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
Show 46 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-ibmRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el4 | 1:1.6.0.9.1-1jpp.1.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el4 | 1:1.6.0.9.1-1jpp.1.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el4 | 1:1.6.0.9.1-1jpp.1.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el4 | 1:1.6.0.9.1-1jpp.1.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el4 | 1:1.6.0.9.1-1jpp.1.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el4 | 1:1.6.0.9.1-1jpp.1.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el4 | 1:1.6.0.9.1-1jpp.1.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:6 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el6 | 1:1.6.0.9.1-1jpp.1.el6 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el6 | 1:1.6.0.9.1-1jpp.1.el6 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el6 | 1:1.6.0.9.1-1jpp.1.el6 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el6 | 1:1.6.0.9.1-1jpp.1.el6 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el6 | 1:1.6.0.9.1-1jpp.1.el6 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el6 | 1:1.6.0.9.1-1jpp.1.el6 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 14 CVEs |
before 1:1.6.0.9.1-1jpp.1.el6 | 1:1.6.0.9.1-1jpp.1.el6 |
java-1.6.0-ibmRed Hat:network_satellite:5.4::el5 From an advisory covering 38 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.4::el5 From an advisory covering 38 CVEs |
before 1:1.6.0.9.1-1jpp.1.el5 | 1:1.6.0.9.1-1jpp.1.el5 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Sun Java Applet2ClassLoader Remote Code Execution | 2011-02-15 |
| Exploit-DB | Sun Java Applet2ClassLoader - Remote Code Execution (Metasploit) | 2011-03-16 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4452 is a high vulnerability (CVSS 10.0) in Sun Jre, published February 17, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 83.0%, the 99th percentile. No source names a fixed version.
References
oracle.com/technetwork/topics/security/cpuapr2011-301950.html
securityreason.com/securityalert/8145
marc.info?l=bugtraq&m=134254866602253&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14230
secunia.com/advisories/44954
Show 186 moreShow less
redhat.com/support/errata/RHSA-2011-0880.html
nvd.nist.gov/vuln/detail/CVE-2010-4452
github.com/advisories/GHSA-mq39-jwgr-3jxw
access.redhat.com/errata/RHSA-2011:0282
bugzilla.redhat.com/show_bug.cgi?id=674336
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0282.json
cve.org/CVERecord?id=CVE-2010-4422
ibm.com/developerworks/java/jdk/alerts
rhn.redhat.com/errata/RHSA-2010-0987.html