Exploitation Summary
CVE-2010-0886 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 5 public exploits from researchers including Metasploit, Tavis Ormandy, Ruben Santamarta, including a Metasploit module exploits/windows/browser/java_ws_arginject_altjvm.
AI-analyzed exploit summary This Metasploit module exploits CVE-2010-0886, a flaw in Sun Java Web Start Plugin where command line arguments are improperly validated. It leverages the -J and -XXaltjvm options to execute arbitrary code via a malicious JNLP file served over HTTP.
Description
Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Exploits (5)
This Metasploit module exploits CVE-2010-0886, a flaw in Sun Java Web Start Plugin where command line arguments are improperly validated. It leverages the -J and -XXaltjvm options to execute arbitrary code via a malicious JNLP file served over HTTP.
This exploit leverages insufficient parameter validation in the Java Deployment Toolkit's launch() method to pass arbitrary command-line arguments to javaws.exe, enabling remote code execution via a malicious JAR file loaded from a UNC path.
The writeup details a logic flaw in Java JRE's Web Start support, where command-line parameters are not validated, allowing attackers to inject malicious parameters via crafted HTML embed tags. The analysis includes disassembly snippets and explains how the '-XXaltjvm' parameter can be abused to load a malicious JVM library.
This Metasploit module exploits CVE-2010-0886 by leveraging the -J and -XXaltjvm Java Web Start plugin options to execute arbitrary code via a crafted JNLP file. It uses WebDAV and SMB to deliver a malicious DLL payload to vulnerable Windows systems.
This Metasploit module exploits CVE-2010-0886, a command line argument injection vulnerability in Sun Java Web Start Plugin. It leverages the -J and -XXaltjvm options to execute arbitrary code via a crafted JNLP file, targeting Windows systems with WebClient service enabled.