Improper input validation in Oracle Java SE - CVE-2010-0886
Published: January 3, 2017 / Updated: November 20, 2020
Vulnerability identifier: #VU3146
CSH Severity: Critical
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2010-0886
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to an error when parsing URL to a Java Networking Launching Protocol (.jnlp) file. A remote attacker can create a specially crafted link, trick the victim into clicking on it and execute arbitrary commands on the target system with privileges of the current user.
Successful exploitation of the vulnerability results in compromise of vulnerable system.
Note: this vulnerability is being actively exploited.
Affected software
Oracle Java SE
How to mitigate CVE-2010-0886
Install JDK and JRE 6 Update 20.
Links to Public Exploits and PoC-codes
- Exploit #708 - Sun Java Web Start Plugin - Command Line Argument Injection (Metasploit) (March 18, 2020)
- Exploit #709 - Sun Java - Web Start Plugin Command Line Argument Injection (Metasploit) (March 18, 2020)
- Exploit #710 - JAVA Web Start - Arbitrary Command-Line Injection (March 18, 2020)
- Exploit #711 - Java Deployment Toolkit - Performs Insufficient Validation of Parameters (March 18, 2020)
- Exploit #1690 - Sun Java Web Start Plugin Command Line Argument Injection (March 18, 2020)