---
title: "CVE-2010-0843\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2010-0843?format=md
keywords: index, follow
---

# CVE-2010-0843

Publication date 1 April 2010

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Unspecified vulnerability in the Sound component in Oracle Java SE and Java
for Business 6 Update 18, 5.0 Update 23, 1.4.2\_25, and 1.3.1\_27 allows
remote attackers to affect confidentiality, integrity, and availability via
unknown vectors. NOTE: the previous information was obtained from the
March 2010 CPU. Oracle has not commented on claims from a reliable
researcher that this is related to XNewPtr and improper handling of an
integer parameter when allocating heap memory in the com.sun.media.sound
libraries, which allows remote attackers to execute arbitrary code.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| openjdk-6 | 11.04 natty | Not affected |
| 10.10 maverick | Not affected |
| 10.04 LTS lucid | Not affected |
| 9.10 karmic | Not affected |
| 9.04 jaunty | Not affected |
| 8.10 intrepid | Ignored end of life, was needed |
| 8.04 LTS hardy | Not affected |
| 6.06 LTS dapper | Not in release |
| sun-java5 | 11.04 natty | Not in release |
| 10.10 maverick | Not in release |
| 10.04 LTS lucid | Not in release |
| 9.10 karmic | Not in release |
| 9.04 jaunty | Ignored end of life |
| 8.10 intrepid | Ignored end of life, was needed |
| 8.04 LTS hardy | Ignored end of life |
| 6.06 LTS dapper | Ignored end of life |
| sun-java6 | 11.04 natty | Not affected |
| 10.10 maverick | Not affected |
| 10.04 LTS lucid | Not affected |
| 9.10 karmic | Fixed 6.20dlj-0ubuntu1.9.10 |
| 9.04 jaunty | Fixed 6.20dlj-0ubuntu1.9.04 |
| 8.10 intrepid | Ignored end of life, was needs-triage |
| 8.04 LTS hardy | Fixed 6.20dlj-0ubuntu1.8.04 |
| 6.06 LTS dapper | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0843)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2010-0843)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2010-0843)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2010-0843)

### Other references

* <http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html>
* <https://www.cve.org/CVERecord?id=CVE-2010-0843>