Oracle Java SE and Java for Business contain an unspecified flaw related to the CORBA component. This may allow a remote attacker to execute arbitrary code by misusing permissions granted to certain system objects. No further details have been provided

Currently, there are no known workarounds or upgrades to correct this issue. However, Sun has released a patch to address this vulnerability.

• Related OSVDB ID: 69033 69034 69035 69036 69037 69038 69039 69040 69041 69042 69043 69044 69045 69046 69047 69048 69049 69050 69051 69053 69054 69055 69056 69057 69058 69059
• CVE ID: 2010-3554 (see also: NVD)
• Secunia Advisory ID: 41791 41814 41821 41886 41925 41958 41972 42377 42560 42974 43309 46529 46651 46728 49966
• Bugtraq ID: 43994
• Vendor Specific Advisory URL: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03405642
  http://www.ubuntu.com/usn/usn-1010-1
  http://www.vmware.com/security/advisories/VMSA-2011-0003.html
• Vendor Specific News/Changelog Entry: http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049528.html
  http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049702.html
  http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
  http://lists.vmware.com/pipermail/security-announce/2011/000149.html
  http://support.avaya.com/css/P8/documents/100114315
  http://support.avaya.com/css/P8/documents/100114327
  http://www.gentoo.org/security/en/glsa/glsa-201111-02.xml
  http://www.oracle.com/technetwork/topics/security/javacpuoct2010-176258.html
  http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02616748
  https://bugzilla.redhat.com/show_bug.cgi?id=639880
• Other Advisory URL: http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS10-030/index.html
• RedHat RHSA: https://rhn.redhat.com/errata/RHSA-2010-0768.html
  https://rhn.redhat.com/errata/RHSA-2010-0770.html
  RHSA-2010:0770

• Marc Schoenefeld