CVE-2008-3109

2008-07-0923:41:00

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

High

EPSS

0.018

Percentile

88.3%

JSON

Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or © execute local programs.

Affected configurations

Nvd

Node

sunjdkRange≤6update_6

sunjdkMatch6update_1

sunjdkMatch6update_2

sunjdkMatch6update_3

sunjdkMatch6update_4

sunjdkMatch6update_5

sunjreRange≤6update_6

sunjreMatch6update_1

sunjreMatch6update_2

sunjreMatch6update_3

sunjreMatch6update_4

sunjreMatch6update_5

VendorProductVersionCPE
sunjdk*cpe:2.3:a:sun:jdk:*:update_6:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*
sunjdk6cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*
sunjre*cpe:2.3:a:sun:jre:*:update_6:*:*:*:*:*:*
sunjre6cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*
sunjre6cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*
sunjre6cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	jdk	*	cpe:2.3:a:sun:jdk::update_6::::::*
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_1::::::
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_2::::::
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_3::::::
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_4::::::
sun	jdk	6	cpe:2.3:a:sun:jdk:6:update_5::::::
sun	jre	*	cpe:2.3:a:sun:jre::update_6::::::*
sun	jre	6	cpe:2.3:a:sun:jre:6:update_1::::::
sun	jre	6	cpe:2.3:a:sun:jre:6:update_2::::::
sun	jre	6	cpe:2.3:a:sun:jre:6:update_3::::::