Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-3107
HistoryJul 09, 2008 - 11:41 p.m.

CVE-2008-3107

2008-07-0923:41:00
CWE-264
[email protected]
web.nvd.nist.gov
1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.6 High

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.4%

JSON

Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or © execute local programs.

Affected configurations

NVD
Node
sunjdkRange≤5.0update_15
OR
sunjdkRange≤6update_6
OR
sunjdkMatch5.0update_1
OR
sunjdkMatch5.0update_10
OR
sunjdkMatch5.0update_11
OR
sunjdkMatch5.0update_12
OR
sunjdkMatch5.0update_13
OR
sunjdkMatch5.0update_14
OR
sunjdkMatch5.0update_2
OR
sunjdkMatch5.0update_3
OR
sunjdkMatch5.0update_4
OR
sunjdkMatch5.0update_5
OR
sunjdkMatch5.0update_6
OR
sunjdkMatch5.0update_7
OR
sunjdkMatch5.0update_8
OR
sunjdkMatch5.0update_9
OR
sunjdkMatch6update_1
OR
sunjdkMatch6update_2
OR
sunjdkMatch6update_3
OR
sunjdkMatch6update_4
OR
sunjdkMatch6update_5
OR
sunjreRange≤1.4.2_17
OR
sunjreRange≤5.0update_15
OR
sunjreRange≤6update_6
OR
sunjreMatch1.4.2
OR
sunjreMatch1.4.2_01
OR
sunjreMatch1.4.2_02
OR
sunjreMatch1.4.2_03
OR
sunjreMatch1.4.2_3
OR
sunjreMatch1.4.2_04
OR
sunjreMatch1.4.2_05
OR
sunjreMatch1.4.2_06
OR
sunjreMatch1.4.2_07
OR
sunjreMatch1.4.2_8
OR
sunjreMatch1.4.2_9
OR
sunjreMatch1.4.2_10
OR
sunjreMatch1.4.2_11
OR
sunjreMatch1.4.2_12
OR
sunjreMatch1.4.2_13
OR
sunjreMatch1.4.2_14
OR
sunjreMatch1.4.2_15
OR
sunjreMatch1.4.2_16
OR
sunjreMatch5.0update_1
OR
sunjreMatch5.0update_10
OR
sunjreMatch5.0update_11
OR
sunjreMatch5.0update_12
OR
sunjreMatch5.0update_13
OR
sunjreMatch5.0update_14
OR
sunjreMatch5.0update_2
OR
sunjreMatch5.0update_3
OR
sunjreMatch5.0update_4
OR
sunjreMatch5.0update_5
OR
sunjreMatch5.0update_6
OR
sunjreMatch5.0update_7
OR
sunjreMatch5.0update_8
OR
sunjreMatch5.0update_9
OR
sunjreMatch6update_1
OR
sunjreMatch6update_2
OR
sunjreMatch6update_3
OR
sunjreMatch6update_4
OR
sunjreMatch6update_5
OR
sunsdkRange≤1.4.2_17
OR
sunsdkMatch1.4.2_02
OR
sunsdkMatch1.4.2_03
OR
sunsdkMatch1.4.2_04
OR
sunsdkMatch1.4.2_05
OR
sunsdkMatch1.4.2_06
OR
sunsdkMatch1.4.2_07
OR
sunsdkMatch1.4.2_08
OR
sunsdkMatch1.4.2_09
OR
sunsdkMatch1.4.2_10
OR
sunsdkMatch1.4.2_11
OR
sunsdkMatch1.4.2_12
OR
sunsdkMatch1.4.2_13
OR
sunsdkMatch1.4.2_14
OR
sunsdkMatch1.4.2_15
OR
sunsdkMatch1.4.2_16

References

Related

cve 1
ubuntucve 1
cvelist 1
prion 1
redhat 3
nessus 22
openvas 7
suse 1
vmware 2
securityvulns 1
gentoo 1
cve
cve
CVE-2008-3107
2008-07-09 23:41:00
ubuntucve
ubuntucve
CVE-2008-3107
2008-07-09 00:00:00
cvelist
cvelist
CVE-2008-3107
2008-07-09 23:00:00
prion
prion
Design/Logic Flaw
2008-07-09 23:41:00
redhat
redhat
(RHSA-2008:0595) Critical: java-1.5.0-sun security update
2008-07-14 00:00:00
(RHSA-2008:0636) Low: Red Hat Network Satellite Server Sun Java Runtime security update
2008-08-13 00:00:00
(RHSA-2008:0594) Critical: java-1.6.0-sun security update
2008-07-14 00:00:00
nessus
nessus
RHEL 4 / 5 : java-1.5.0-sun (RHSA-2008:0595)
2009-08-24 00:00:00
Sun Java J2SE 1.4.2 < Update 18 Multiple Vulnerabilities (Unix)
2013-02-22 00:00:00
openSUSE 10 Security Update : java-1_4_2-sun (java-1_4_2-sun-5430)
2008-08-24 00:00:00
openvas
openvas
SLES9: Security update for Java2
2009-10-10 00:00:00
SLES9: Security update for Java2
2009-10-10 00:00:00
SLES10: Security update for Java 1.4.2
2009-10-13 00:00:00
suse
suse
remote code execution in Sun Java security update
2008-08-25 12:44:04
vmware
vmware
VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues
2008-10-03 00:00:00
VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues
2008-10-03 00:00:00
securityvulns
securityvulns
VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues
2008-10-06 00:00:00
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2009-11-17 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.6 High

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.4%

JSON
Related for NVD:CVE-2008-3107
cve1ubuntucve1cvelist1prion1redhat3nessus22openvas7suse1vmware2securityvulns1gentoo1