7.5

CVE-2008-3115

Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which might allow remote attackers to exploit vulnerabilities in these older releases.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Jdk Updateupdate_6 Version <= 6
Sun ≫ Jdk Version5.0 Updateupdate_10
Sun ≫ Jdk Version5.0 Updateupdate_11
Sun ≫ Jdk Version5.0 Updateupdate_12
Sun ≫ Jdk Version5.0 Updateupdate_13
Sun ≫ Jdk Version5.0 Updateupdate_14
Sun ≫ Jdk Version5.0 Updateupdate_15
Sun ≫ Jdk Version5.0 Updateupdate_6
Sun ≫ Jdk Version5.0 Updateupdate_7
Sun ≫ Jdk Version5.0 Updateupdate_8
Sun ≫ Jdk Version5.0 Updateupdate_9
Sun ≫ Jdk Version6 Updateupdate_1
Sun ≫ Jdk Version6 Updateupdate_2
Sun ≫ Jdk Version6 Updateupdate_3
Sun ≫ Jdk Version6 Updateupdate_4
Sun ≫ Jdk Version6 Updateupdate_5
Sun ≫ Jre Updateupdate_6 Version <= 6
Sun ≫ Jre Version5.0 Updateupdate_10
Sun ≫ Jre Version5.0 Updateupdate_11
Sun ≫ Jre Version5.0 Updateupdate_12
Sun ≫ Jre Version5.0 Updateupdate_13
Sun ≫ Jre Version5.0 Updateupdate_14
Sun ≫ Jre Version5.0 Updateupdate_15
Sun ≫ Jre Version5.0 Updateupdate_6
Sun ≫ Jre Version5.0 Updateupdate_7
Sun ≫ Jre Version5.0 Updateupdate_8
Sun ≫ Jre Version5.0 Updateupdate_9
Sun ≫ Jre Version6 Updateupdate_1
Sun ≫ Jre Version6 Updateupdate_2
Sun ≫ Jre Version6 Updateupdate_3
Sun ≫ Jre Version6 Updateupdate_4
Sun ≫ Jre Version6 Updateupdate_5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.81% 0.932
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
http://secunia.com/advisories/32018
http://support.apple.com/kb/HT3178
http://support.apple.com/kb/HT3179
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
http://marc.info/?l=bugtraq&m=122331139823057&w=2
http://secunia.com/advisories/31010
Vendor Advisory
http://secunia.com/advisories/31600
http://secunia.com/advisories/32179
http://secunia.com/advisories/32180
http://secunia.com/advisories/37386
http://security.gentoo.org/glsa/glsa-200911-02.xml
http://www.securityfocus.com/archive/1/497041/100/0/threaded
http://www.us-cert.gov/cas/techalerts/TA08-193A.html
US Government Resource
http://www.vmware.com/security/advisories/VMSA-2008-0016.html
http://www.vupen.com/english/advisories/2008/2056/references
http://www.vupen.com/english/advisories/2008/2740
http://sunsolve.sun.com/search/document.do?assetkey=1-66-238966-1
Patch
http://www.securityfocus.com/bid/30142
http://www.securitytracker.com/id?1020460
https://exchange.xforce.ibmcloud.com/vulnerabilities/43665