Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-1188
HistoryMar 06, 2008 - 9:44 p.m.

CVE-2008-1188

2008-03-0621:44:00
CWE-119
[email protected]
web.nvd.nist.gov
30
cve-2008-1188
buffer overflow
java web start
sun jdk
jre
remote code execution
security vulnerability
nvd

7.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.546 Medium

EPSS

Percentile

97.6%

JSON

Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with (1) a long key name in the xml header or (2) a long charset value, different issues than CVE-2008-1189, aka “The first two issues.”

References

Related

prion 2
ubuntucve 2
cve 1
checkpoint_advisories 1
securityvulns 3
zdi 2
redhat 5
nessus 17
openvas 22
suse 2
f5 2
vmware 2
gentoo 1
prion
prion
Buffer overflow
2008-03-06 21:44:00
Buffer overflow
2008-03-06 21:44:00
ubuntucve
ubuntucve
CVE-2008-1189
2008-03-06 00:00:00
CVE-2008-1188
2008-03-06 00:00:00
cve
cve
CVE-2008-1189
2008-03-06 21:44:00
checkpoint_advisories
checkpoint_advisories
Sun Java Web Start Charset Encoding Stack Buffer Overflow (CVE-2008-1188)
2010-03-01 00:00:00
securityvulns
securityvulns
ZDI-08-010: Java Web Start encoding Stack Buffer Overflow
2008-03-13 00:00:00
Sun java WebStart multiple security vulnerabilities
2008-03-13 00:00:00
ZDI-08-009: Java Web Start tempbuff Stack Buffer Overflow
2008-03-13 00:00:00
zdi
zdi
Java Web Start tempbuff Stack Buffer Overflow Vulnerability
2008-03-12 00:00:00
Java Web Start encoding Stack Buffer Overflow Vulnerability
2008-03-12 00:00:00
redhat
redhat
(RHSA-2008:0267) Critical: java-1.6.0-ibm security update
2008-05-19 00:00:00
(RHSA-2008:0210) Critical: java-1.5.0-ibm security update
2008-04-03 00:00:00
(RHSA-2008:0186) Critical: java-1.5.0-sun security update
2008-03-06 00:00:00
nessus
nessus
RHEL 5 : java-1.6.0-ibm (RHSA-2008:0267)
2013-01-24 00:00:00
RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2008:0210)
2009-08-24 00:00:00
SuSE 10 Security Update : Sun Java (ZYPP Patch Number 5131)
2008-04-04 00:00:00
openvas
openvas
SLES10: Security update for Sun Java
2009-10-13 00:00:00
SLES9: Security update for Java2
2009-10-10 00:00:00
SLES10: Security update for Sun Java
2009-10-13 00:00:00
suse
suse
remote code execution in Sun Java
2008-04-02 15:02:11
remote code execution in IBMJava2,IBMJava5,java-1_4_2-ibm,java-1_5_0-ibm
2008-04-25 14:46:33
f5
f5
K16475 : Multiple Sun Java vulnerabilities
2015-04-21 00:00:00
SOL16475 - Multiple Sun Java vulnerabilities
2015-04-21 00:00:00
vmware
vmware
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2008-04-17 00:00:00

7.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.546 Medium

EPSS

Percentile

97.6%

JSON
Related for CVE-2008-1188
prion2ubuntucve2cve1checkpoint_advisories1securityvulns3zdi2redhat5nessus17openvas22suse2f52vmware2gentoo1