Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this involves an incorrect sign extension in the HeadspaceSoundbank.nGetName function, which allows attackers to execute arbitrary code via a crafted BANK record that leads to a buffer overflow.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2024-08-07T03:11:44.350Z

Reserved: 2010-09-20T00:00:00

Link: CVE-2010-3559

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2010-10-19T22:00:03.157

Modified: 2025-04-11T00:51:21.963

Link: CVE-2010-3559

cve-icon Redhat

Severity : Critical

Publid Date: 2010-10-12T00:00:00Z

Links: CVE-2010-3559 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses