CVE-2008-3107

2008-07-0900:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.022 Low

EPSS

Percentile

89.3%

JSON

Unspecified vulnerability in the Virtual Machine in Sun Java Runtime
Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before
Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent
attackers to gain privileges via an untrusted (1) application or (2)
applet, as demonstrated by an application or applet that grants itself
privileges to (a) read local files, (b) write to local files, or ©
execute local programs.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchopenjdk-6< 6b11-2ubuntu2.1UNKNOWN
ubuntu8.10noarchopenjdk-6< 6b11-1UNKNOWN
ubuntu9.04noarchopenjdk-6< 6b11-1UNKNOWN
ubuntu9.10noarchopenjdk-6< 6b11-1UNKNOWN
ubuntu8.04noarchsun-java5< 1.5.0-22-0ubuntu0.8.04UNKNOWN
ubuntu8.04noarchsun-java6< 6-17-0ubuntu1.8.04UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	openjdk-6	< 6b11-2ubuntu2.1	UNKNOWN
ubuntu	8.10	noarch	openjdk-6	< 6b11-1	UNKNOWN
ubuntu	9.04	noarch	openjdk-6	< 6b11-1	UNKNOWN
ubuntu	9.10	noarch	openjdk-6	< 6b11-1	UNKNOWN
ubuntu	8.04	noarch	sun-java5	< 1.5.0-22-0ubuntu0.8.04	UNKNOWN
ubuntu	8.04	noarch	sun-java6	< 6-17-0ubuntu1.8.04	UNKNOWN