CVE-2010-0539

no score yetEPSS 3.4%

Integer signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted applet.

EPSS: 3.4% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-189
Published: 2010-05-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apple:java_1.5
apple:java_1.6

References

http://lists.apple.com/archives/security-announce/2010//May/msg00001.html
http://lists.apple.com/archives/security-announce/2010//May/msg00002.html
http://secunia.com/advisories/39819
http://securitytracker.com/id?1024012
http://support.apple.com/kb/HT4170

Check your stack JSON