The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2010-12-30T20:00:00Z

Updated: 2024-08-07T03:18:53.023Z

Reserved: 2010-10-01T00:00:00Z

Link: CVE-2010-3708

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2010-12-30T21:00:01.267

Modified: 2010-12-30T21:00:01.267

Link: CVE-2010-3708

cve-icon Redhat

Severity : Important

Publid Date: 2010-12-01T00:00:00Z

Links: CVE-2010-3708 - Bugzilla