7.5

CVE-2008-3109

Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.

Data is provided by the National Vulnerability Database (NVD)
Sun ≫ Jdk Updateupdate_6 Version <= 6
Sun ≫ Jdk Version6 Updateupdate_1
Sun ≫ Jdk Version6 Updateupdate_2
Sun ≫ Jdk Version6 Updateupdate_3
Sun ≫ Jdk Version6 Updateupdate_4
Sun ≫ Jdk Version6 Updateupdate_5
Sun ≫ Jre Updateupdate_6 Version <= 6
Sun ≫ Jre Version6 Updateupdate_1
Sun ≫ Jre Version6 Updateupdate_2
Sun ≫ Jre Version6 Updateupdate_3
Sun ≫ Jre Version6 Updateupdate_4
Sun ≫ Jre Version6 Updateupdate_5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 6.61% 0.903
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P