Exploitation Summary
CVE-2010-3552 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Metasploit, Skylined, including a Metasploit module exploits/windows/browser/java_docbase_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in the Sun Java Runtime Environment (JRE) before v6 Update 22 via the 'docbase' parameter in the new plugin component, allowing arbitrary code execution.
Description
Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in the Sun Java Runtime Environment (JRE) before v6 Update 22 via the 'docbase' parameter in the new plugin component, allowing arbitrary code execution.
This exploit targets a stack-based buffer overflow in Oracle Java 6 (CVE-2010-3552) to achieve remote code execution. It bypasses DEP using a heap spray combined with a ret-into-libc attack to execute shellcode.
This Metasploit module exploits a stack-based buffer overflow in the Sun Java Runtime Environment (JRE) before v6 Update 22. It leverages a vulnerability in the 'docbase' parameter of the 'launchjnlp' functionality to execute arbitrary code via a crafted HTML page.