Sploitus

Exploit for Immunity Canvas: CVE_2010_4452

CVE-2010-4452

canvas · 2011-02-17

Exploit Code

MARKDOWN23 lines
## https://sploitus.com/exploit?id=CVE_2010_4452
**Name**|  CVE_2010_4452  
---|---  
**CVE**|  CVE-2010-4452  
**Exploit Pack**|  [CANVAS](<http://http://www.immunityinc.com/products-canvas.shtml>)  
**Description**| CVE_2010_4452  
**Notes**| CVE Name: CVE-2010-4452  
VENDOR: Oracle  
NOTES:   
This exploit will work against Java plugin bundled with  
Oracle/SUN JDK/JRE &lt;= 6 Update 23. Target operating systems  
are Windows (all versions) and Ubuntu Linux.  
  
For Linux, the official JDK/JRE from Sun/Oracle must be installed,  
in the directory /usr/lib/jvm/java-6-sun (which is the default location).  
This exploit will not work against OpenJDK/JRE.  
  
This exploit does not work with clientd. Use it with httpserver.  
  
Repeatability: Infinite (client side - no crash)  
References: http://www.oracle.com/technetwork/topics/security/javacpufeb2011-304611.html  
CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2010-4452  
Date public: 02/25/2011