CVE-2008-1193 Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to gain privileges via an....
HighCVSS 9.3
EPSS 12.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to gain privileges via an untrusted application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jdk | = 1.5.0 | No fix listed |
| sun jdk | = 1.5.0-update1 | No fix listed |
| sun jdk | = 1.5.0-update10 | No fix listed |
| sun jdk | = 1.5.0-update11 | No fix listed |
| sun jdk | = 1.5.0-update12 | No fix listed |
| sun jdk | = 1.5.0-update13 | No fix listed |
| sun jdk | = 1.5.0-update14 | No fix listed |
| sun jdk | = 1.5.0-update2 | No fix listed |
| sun jdk | = 1.5.0-update3 | No fix listed |
| sun jdk | = 1.5.0-update4 | No fix listed |
| sun jdk | = 1.5.0-update5 | No fix listed |
| sun jdk | = 1.5.0-update6 | No fix listed |
| sun jdk | = 1.5.0-update7 | No fix listed |
| sun jdk | = 1.5.0-update8 | No fix listed |
| sun jdk | = 1.5.0-update9 | No fix listed |
| sun jdk | = 1.6.0 | No fix listed |
| sun jdk | = 1.6.0-update_3 | No fix listed |
| sun jdk | = 1.6.0-update_4 | No fix listed |
| sun jre | = 1.5.0 | No fix listed |
| sun jre | = 1.5.0-update1 | No fix listed |
| sun jre | = 1.5.0-update10 | No fix listed |
| sun jre | = 1.5.0-update11 | No fix listed |
| sun jre | = 1.5.0-update12 | No fix listed |
| sun jre | = 1.5.0-update13 | No fix listed |
| sun jre | = 1.5.0-update14 | No fix listed |
Show 13 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 1.5.0-update2 | No fix listed |
| sun jre | = 1.5.0-update3 | No fix listed |
| sun jre | = 1.5.0-update4 | No fix listed |
| sun jre | = 1.5.0-update5 | No fix listed |
| sun jre | = 1.5.0-update6 | No fix listed |
| sun jre | = 1.5.0-update7 | No fix listed |
| sun jre | = 1.5.0-update8 | No fix listed |
| sun jre | = 1.5.0-update9 | No fix listed |
| sun jre | = 1.6.0 | No fix listed |
| sun jre | = 1.6.0-update_1 | No fix listed |
| sun jre | = 1.6.0-update_2 | No fix listed |
| sun jre | = 1.6.0-update_3 | No fix listed |
| sun jre | = 1.6.0-update_4 | No fix listed |
References
- BEA08-201.00 third-party-advisory vendor-advisory
- APPLE-SA-2008-09-24 mailing-list third-party-advisory vendor-advisory
- SUSE-SA:2008:018 mailing-list third-party-advisory vendor-advisory
- SUSE-SA:2008:025 mailing-list third-party-advisory vendor-advisory
- 29239 third-party-advisory
- 29273 third-party-advisory
- 29498 third-party-advisory
- 29582 third-party-advisory
- 29841 third-party-advisory
- 29858 third-party-advisory
- 29897 third-party-advisory
- 30003 third-party-advisory
- 30676 third-party-advisory
- 30780 third-party-advisory
- 31497 third-party-advisory
- 32018 third-party-advisory
- GLSA-200804-28 third-party-advisory vendor-advisory
- 233325 patch third-party-advisory vendor-advisory
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- GLSA-200804-20 third-party-advisory vendor-advisory
- GLSA-200806-11 third-party-advisory vendor-advisory
- RHSA-2008:0186 third-party-advisory vendor-advisory
- RHSA-2008:0210 third-party-advisory vendor-advisory
- RHSA-2008:0244 third-party-advisory vendor-advisory
- RHSA-2008:0245 third-party-advisory vendor-advisory
- RHSA-2008:0267 third-party-advisory vendor-advisory
- 28125 third-party-advisory vdb-entry
- 1019551 third-party-advisory vdb-entry
- TA08-066A third-party-advisory us-government-resource
- www.vmware.com third-party-advisory
- ADV-2008-0770 third-party-advisory vdb-entry
- ADV-2008-1252 third-party-advisory vdb-entry
- ADV-2008-1856 third-party-advisory vdb-entry
- sun-jre-imagelibrary-privilege-escalation(41028) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:11409 signature third-party-advisory vdb-entry