10

CVE-2008-3107

Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Jdk Update update_15 Version <= 5.0
Sun ≫ Jdk Update update_6 Version <= 6
Sun ≫ Jdk Version 5.0 Update update_1
Sun ≫ Jdk Version 5.0 Update update_10
Sun ≫ Jdk Version 5.0 Update update_11
Sun ≫ Jdk Version 5.0 Update update_12
Sun ≫ Jdk Version 5.0 Update update_13
Sun ≫ Jdk Version 5.0 Update update_14
Sun ≫ Jdk Version 5.0 Update update_2
Sun ≫ Jdk Version 5.0 Update update_3
Sun ≫ Jdk Version 5.0 Update update_4
Sun ≫ Jdk Version 5.0 Update update_5
Sun ≫ Jdk Version 5.0 Update update_6
Sun ≫ Jdk Version 5.0 Update update_7
Sun ≫ Jdk Version 5.0 Update update_8
Sun ≫ Jdk Version 5.0 Update update_9
Sun ≫ Jdk Version 6 Update update_1
Sun ≫ Jdk Version 6 Update update_2
Sun ≫ Jdk Version 6 Update update_3
Sun ≫ Jdk Version 6 Update update_4
Sun ≫ Jdk Version 6 Update update_5
Sun ≫ Jre Version <= 1.4.2_17
Sun ≫ Jre Update update_15 Version <= 5.0
Sun ≫ Jre Update update_6 Version <= 6
Sun ≫ Jre Version 1.4.2
Sun ≫ Jre Version 1.4.2_01
Sun ≫ Jre Version 1.4.2_02
Sun ≫ Jre Version 1.4.2_03
Sun ≫ Jre Version 1.4.2_3
Sun ≫ Jre Version 1.4.2_04
Sun ≫ Jre Version 1.4.2_05
Sun ≫ Jre Version 1.4.2_06
Sun ≫ Jre Version 1.4.2_07
Sun ≫ Jre Version 1.4.2_8
Sun ≫ Jre Version 1.4.2_9
Sun ≫ Jre Version 1.4.2_10
Sun ≫ Jre Version 1.4.2_11
Sun ≫ Jre Version 1.4.2_12
Sun ≫ Jre Version 1.4.2_13
Sun ≫ Jre Version 1.4.2_14
Sun ≫ Jre Version 1.4.2_15
Sun ≫ Jre Version 1.4.2_16
Sun ≫ Jre Version 5.0 Update update_1
Sun ≫ Jre Version 5.0 Update update_10
Sun ≫ Jre Version 5.0 Update update_11
Sun ≫ Jre Version 5.0 Update update_12
Sun ≫ Jre Version 5.0 Update update_13
Sun ≫ Jre Version 5.0 Update update_14
Sun ≫ Jre Version 5.0 Update update_2
Sun ≫ Jre Version 5.0 Update update_3
Sun ≫ Jre Version 5.0 Update update_4
Sun ≫ Jre Version 5.0 Update update_5
Sun ≫ Jre Version 5.0 Update update_6
Sun ≫ Jre Version 5.0 Update update_7
Sun ≫ Jre Version 5.0 Update update_8
Sun ≫ Jre Version 5.0 Update update_9
Sun ≫ Jre Version 6 Update update_1
Sun ≫ Jre Version 6 Update update_2
Sun ≫ Jre Version 6 Update update_3
Sun ≫ Jre Version 6 Update update_4
Sun ≫ Jre Version 6 Update update_5
Sun ≫ Sdk Version <= 1.4.2_17
Sun ≫ Sdk Version 1.4.2_02
Sun ≫ Sdk Version 1.4.2_03
Sun ≫ Sdk Version 1.4.2_04
Sun ≫ Sdk Version 1.4.2_05
Sun ≫ Sdk Version 1.4.2_06
Sun ≫ Sdk Version 1.4.2_07
Sun ≫ Sdk Version 1.4.2_08
Sun ≫ Sdk Version 1.4.2_09
Sun ≫ Sdk Version 1.4.2_10
Sun ≫ Sdk Version 1.4.2_11
Sun ≫ Sdk Version 1.4.2_12
Sun ≫ Sdk Version 1.4.2_13
Sun ≫ Sdk Version 1.4.2_14
Sun ≫ Sdk Version 1.4.2_15
Sun ≫ Sdk Version 1.4.2_16
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.64% 0.881
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/31497
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
http://secunia.com/advisories/32018
http://support.apple.com/kb/HT3178
http://support.apple.com/kb/HT3179
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
http://marc.info/?l=bugtraq&m=122331139823057&w=2
http://secunia.com/advisories/31010
Vendor Advisory
http://secunia.com/advisories/31055
http://secunia.com/advisories/31600
http://secunia.com/advisories/32179
http://secunia.com/advisories/32180
http://secunia.com/advisories/37386
http://security.gentoo.org/glsa/glsa-200911-02.xml
http://www.redhat.com/support/errata/RHSA-2008-0594.html
http://www.redhat.com/support/errata/RHSA-2008-0595.html
http://www.securityfocus.com/archive/1/497041/100/0/threaded
http://www.us-cert.gov/cas/techalerts/TA08-193A.html
US Government Resource
http://www.vmware.com/security/advisories/VMSA-2008-0016.html
http://www.vupen.com/english/advisories/2008/2056/references
http://www.vupen.com/english/advisories/2008/2740
http://sunsolve.sun.com/search/document.do?assetkey=1-66-238967-1
http://www.securityfocus.com/bid/30141
http://www.securitytracker.com/id?1020455
https://exchange.xforce.ibmcloud.com/vulnerabilities/43659
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10219