Exploitation Summary
CVE-2010-4452 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including Metasploit, Frederic Hoguin, jduck, including a Metasploit module exploits/windows/browser/java_codebase_trust.
AI-analyzed exploit summary This Metasploit module exploits CVE-2010-4452, a Java Applet2ClassLoader vulnerability, allowing remote code execution by escaping the Java Sandbox. It leverages a trusted codebase path and a URL without dots to bypass sandbox restrictions.
Description
Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
Exploits (2)
This Metasploit module exploits CVE-2010-4452, a Java Applet2ClassLoader vulnerability, allowing remote code execution by escaping the Java Sandbox. It leverages a trusted codebase path and a URL without dots to bypass sandbox restrictions.
This Metasploit module exploits CVE-2010-4452, a vulnerability in the Java Runtime Environment that allows an applet to run outside the sandbox by manipulating the 'codebase' and 'code' parameters. It serves a malicious .class file and HTML to trigger remote code execution on vulnerable JRE versions prior to 6 update 24.