CVE-2010-4469
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for...
10.0 High
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is heap corruption related to the Verifier and "backward jsrs."
Exploit likelihood
2.92%Up 0.2 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is heap corruption related to the Verifier and "backward jsrs."
- Record
CVE-2010-4469- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is heap corruption related to the Verifier and "backward jsrs."
- Record
CVE-2010-4469- Updated
- 2026-11-02
EUVDEUVD-2010-4438 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is heap corruption related to the Verifier and "backward jsrs."
- Record
EUVD-2010-4438- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-34fq-m8qx-w3x4 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for...
Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue is heap corruption related to the Verifier and "backward jsrs."
- Record
GHSA-34fq-m8qx-w3x4- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openjdk-6Debian:5.0 From an advisory covering 10 CVEs |
before 6b18-1.8.7-2~lenny1, plus listed versions 6b11-9.16b11-9.1+lenny26b12-06b12-1~exp16b12~pre1-0 Show 44 moreShow less6b12~pre2-16b14-1.5~pre1-16b14-1.5~pre1-26b14-1.5~pre1-36b14-1.5~pre1-46b14-1.5~pre1-56b14-1~exp16b16-16b16-1.6-16b16-1.6.1-16b16-1.6.1-26b16-1.6~pre2-16b16-26b16-36b16-46b17-1.7-16b17-1.7-1+sh4.16b17~pre3-16b17~pre3-1+sh46b17~pre3-1+sh4.16b18-1.8-16b18-1.8-26b18-1.8-36b18-1.8-46b18-1.8.1-16b18-1.8.1-26b18-1.8.2-16b18-1.8.2-26b18-1.8.2-36b18-1.8.2-46b18-1.8.3-16b18-1.8.3-26b18-1.8.3-2+squeeze16b18-1.8.3-2~lenny16b18-1.8.4-16b18-1.8.5-16b18-1.8.7-16b18~pre1-16b18~pre1-26b18~pre1-36b18~pre1-46b18~pre2-16b18~pre3-16b18~pre4-1 |
6b18-1.8.7-2~lenny1 |
openjdk-6Debian:6.0 From an advisory covering 10 CVEs |
before 6b18-1.8.7-2~squeeze1, plus listed versions 6b18-1.8.3-26b18-1.8.3-2+squeeze16b18-1.8.4-16b18-1.8.5-16b18-1.8.7-16b18-1.8.7-2~lenny1 |
6b18-1.8.7-2~squeeze1 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.20.b17.el5 | 1:1.6.0.0-1.20.b17.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.20.b17.el5 | 1:1.6.0.0-1.20.b17.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.20.b17.el5 | 1:1.6.0.0-1.20.b17.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.20.b17.el5 | 1:1.6.0.0-1.20.b17.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.20.b17.el5 | 1:1.6.0.0-1.20.b17.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.20.b17.el5 | 1:1.6.0.0-1.20.b17.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
Show 46 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 1:1.6.0.0-1.39.b17.el6_0 | 1:1.6.0.0-1.39.b17.el6_0 |
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el4 | 1:1.6.0.24-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el5 | 1:1.6.0.24-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 From an advisory covering 20 CVEs |
before 1:1.6.0.24-1jpp.1.el6 | 1:1.6.0.24-1jpp.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4469 is a high vulnerability (CVSS 10.0) in Sun Jre, published February 17, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.92%, the 87th percentile. No source names a fixed version.
References
hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-003/index.html
lists.fedoraproject.org/pipermail/package-announce/2011-February/054115.html
securityfocus.com/bid/46400
security.gentoo.org/glsa/glsa-201406-32.xml
marc.info?l=bugtraq&m=134254866602253&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12833
Show 98 moreShow less
oracle.com/technetwork/topics/security/javacpufeb2011-304611.html
secunia.com/advisories/43350
redhat.com/support/errata/RHSA-2011-0282.html
debian.org/security/2011/dsa-2224
exchange.xforce.ibmcloud.com/vulnerabilities/65399
mandriva.com/security/advisories?name=MDVSA-2011:054
nvd.nist.gov/vuln/detail/CVE-2010-4469
github.com/advisories/GHSA-34fq-m8qx-w3x4
access.redhat.com/errata/RHSA-2011:0281
bugzilla.redhat.com/show_bug.cgi?id=675942
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0281.json
cve.org/CVERecord?id=CVE-2010-4448