CVE-2010-4472

CVE Details

Release Date:	2011-02-17
Impact:	Low	What is this?

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect availability, related to XML Digital Signature and unspecified APIs. NOTE: the previous information was obtained from the February 2011 CPU. Oracle has not commented on claims from a downstream vendor that this issue involves the replacement of the XML DSig Transform or C14N algorithm implementations.

See more information about CVE-2010-4472 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v2 metrics

Base Score:	2.6
Vector String:	AV:N/AC:H/Au:N/C:N/I:N/A:P
Version:	2.0
Attack Vector:	Network
Attack Complexity:	High
Authentication:	None
Confidentiality Impact:	None
Integrity Impact:	None
Availability Impact:	Partial

Errata information

Platform

Errata

Release Date