Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2008-3111
HistoryJul 09, 2008 - 11:41 p.m.

Stack overflow

2008-07-0923:41:00
PRIOn knowledge base
www.prio-n.com
6

7.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.675 Medium

EPSS

Percentile

97.9%

JSON

Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by (a) an application that grants itself privileges to (1) read local files, (2) write to local files, or (3) execute local programs; and as demonstrated by (b) a long value associated with a java-vm-args attribute in a j2se tag in a JNLP file, which triggers a stack-based buffer overflow in the GetVMArgsOption function; aka CR 6557220.

References

Related

checkpoint_advisories 2
ubuntucve 1
saint 4
cve 1
zdi 1
nessus 24
openvas 14
redhat 4
suse 3
vmware 2
securityvulns 1
gentoo 1
checkpoint_advisories
checkpoint_advisories
Sun Java Web Start JNLP java-vm-args Heap Buffer Overflow (CVE-2008-3111)
2010-03-03 00:00:00
Sun Java Web Start JNLP vm args Stack Overflow (CVE-2008-3111)
2009-12-24 00:00:00
ubuntucve
ubuntucve
CVE-2008-3111
2008-07-09 00:00:00
saint
saint
Sun Java Web Start JNLP file j2se element heap-size buffer overflow
2008-07-23 00:00:00
Sun Java Web Start JNLP file j2se element heap-size buffer overflow
2008-07-23 00:00:00
Sun Java Web Start JNLP file j2se element heap-size buffer overflow
2008-07-23 00:00:00
cve
cve
CVE-2008-3111
2008-07-09 23:41:00
zdi
zdi
Sun Java Web Start vm args Stack-Based Buffer Overflow Vulnerability
2008-07-17 00:00:00
nessus
nessus
RHEL 4 : Sun Java Runtime in Satellite Server (RHSA-2008:0636)
2010-01-10 00:00:00
Sun Java J2SE 1.4.2 < Update 18 Multiple Vulnerabilities
2008-07-15 00:00:00
SuSE 10 Security Update : IBM Java 1.5 (ZYPP Patch Number 5591)
2008-09-14 00:00:00
openvas
openvas
SLES10: Security update for Java 1.4.2
2009-10-13 00:00:00
SLES9: Security update for Java2
2009-10-10 00:00:00
SLES9: Security update for IBM Java5 JRE and IBMJava5 SDK
2009-10-10 00:00:00
redhat
redhat
(RHSA-2008:0595) Critical: java-1.5.0-sun security update
2008-07-14 00:00:00
(RHSA-2008:0636) Low: Red Hat Network Satellite Server Sun Java Runtime security update
2008-08-13 00:00:00
(RHSA-2008:0790) Critical: java-1.5.0-ibm security update
2008-07-31 00:00:00
suse
suse
remote code execution in IBMJava5-JRE,java-1_5_0-ibm
2008-09-04 13:19:33
remote code execution in java-1_5_0-ibm,IBMJava5
2008-09-17 13:28:28
remote code execution in Sun Java security update
2008-08-25 12:44:04
vmware
vmware
VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues
2008-10-03 00:00:00
VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues
2008-10-03 00:00:00
securityvulns
securityvulns
VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues
2008-10-06 00:00:00
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2009-11-17 00:00:00

7.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.675 Medium

EPSS

Percentile

97.9%

JSON
Related for PRION:CVE-2008-3111
checkpoint_advisories2ubuntucve1saint4cve1zdi1nessus24openvas14redhat4suse3vmware2securityvulns1gentoo1