Lucene search

K
cve[email protected]CVE-2008-5358
HistoryDec 05, 2008 - 11:30 a.m.

CVE-2008-5358

2008-12-0511:30:00
CWE-119
web.nvd.nist.gov
59
cve-2008-5358
java
jre
memory corruption
gif
remote code execution
nvd

8.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.224 Low

EPSS

Percentile

96.4%

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.

CPENameOperatorVersion
sun:jresun jreeq6
sun:jdksun jdkeq6

References

8.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.224 Low

EPSS

Percentile

96.4%