CVE-2008-0657 Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via....
HighCVSS 10.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | <= 1.5.0 | No fix listed |
| sun jre | <= 1.6.0 | No fix listed |
| sun jdk | <= 5.0_update13 | No fix listed |
References
- BEA08-201.00 vendor-advisory
- SUSE-SA:2008:025 vendor-advisory
- 28795 patch third-party-advisory vendor-advisory
- 28888 third-party-advisory
- 29214 third-party-advisory
- 29498 third-party-advisory
- 29841 third-party-advisory
- 29858 third-party-advisory
- 29897 third-party-advisory
- 30676 third-party-advisory
- 30780 third-party-advisory
- 31497 third-party-advisory
- GLSA-200804-28 vendor-advisory
- 231261 vendor-advisory
- GLSA-200804-20 vendor-advisory
- GLSA-200806-11 vendor-advisory
- RHSA-2008:0123 vendor-advisory
- RHSA-2008:0156 vendor-advisory
- RHSA-2008:0210 vendor-advisory
- 27650 vdb-entry
- 1019308 vdb-entry
- www.vmware.com
- ADV-2008-0429 vdb-entry
- ADV-2008-1252 vdb-entry
- ADV-2008-1856 vdb-entry
- oval:org.mitre.oval:def:11505 signature vdb-entry