CVE-2008-3108 Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allows context-dependent attackers t...
HighCVSS 10.0
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allows context-dependent attackers to gain privileges via unspecified vectors related to font processing.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 1.3.1 | No fix listed |
| sun jre | = 1.3.1_2 | No fix listed |
| sun jre | = 1.3.1_03 | No fix listed |
| sun jre | = 1.3.1_04 | No fix listed |
| sun jre | = 1.3.1_05 | No fix listed |
| sun jre | = 1.3.1_06 | No fix listed |
| sun jre | = 1.3.1_07 | No fix listed |
| sun jre | = 1.3.1_08 | No fix listed |
| sun jre | = 1.3.1_09 | No fix listed |
| sun jre | = 1.3.1_10 | No fix listed |
| sun jre | = 1.3.1_11 | No fix listed |
| sun jre | = 1.3.1_12 | No fix listed |
| sun jre | = 1.3.1_13 | No fix listed |
| sun jre | = 1.3.1_14 | No fix listed |
| sun jre | = 1.3.1_15 | No fix listed |
| sun jre | = 1.3.1_16 | No fix listed |
| sun jre | = 1.3.1_17 | No fix listed |
| sun jre | = 1.3.1_18 | No fix listed |
| sun jre | = 1.3.1_19 | No fix listed |
| sun jre | = 1.3.1_20 | No fix listed |
| sun jre | = 1.3.1_21 | No fix listed |
| sun jre | = 1.3.1_22 | No fix listed |
| sun jre | = 1.3.1_23 | No fix listed |
| sun jre | = 1.4.2 | No fix listed |
| sun jre | = 1.4.2_1 | No fix listed |
Show 89 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 1.4.2_2 | No fix listed |
| sun jre | = 1.4.2_3 | No fix listed |
| sun jre | = 1.4.2_4 | No fix listed |
| sun jre | = 1.4.2_5 | No fix listed |
| sun jre | = 1.4.2_6 | No fix listed |
| sun jre | = 1.4.2_7 | No fix listed |
| sun jre | = 1.4.2_8 | No fix listed |
| sun jre | = 1.4.2_9 | No fix listed |
| sun jre | = 1.4.2_10 | No fix listed |
| sun jre | = 1.4.2_11 | No fix listed |
| sun jre | = 1.4.2_12 | No fix listed |
| sun jre | = 1.4.2_13 | No fix listed |
| sun jre | = 1.4.2_14 | No fix listed |
| sun jre | = 1.4.2_15 | No fix listed |
| sun jre | = 1.4.2_16 | No fix listed |
| sun jre | = 1.4.2_17 | No fix listed |
| sun jre | = 1.4.2_18 | No fix listed |
| sun jre | = 1.5.0 | No fix listed |
| sun jre | = 1.5.0-update1 | No fix listed |
| sun jre | = 1.5.0-update10 | No fix listed |
| sun jre | = 1.5.0-update2 | No fix listed |
| sun jre | = 1.5.0-update3 | No fix listed |
| sun jre | = 1.5.0-update4 | No fix listed |
| sun jre | = 1.5.0-update5 | No fix listed |
| sun jre | = 1.5.0-update6 | No fix listed |
| sun jre | = 1.5.0-update7 | No fix listed |
| sun jre | = 1.5.0-update8 | No fix listed |
| sun jre | = 1.5.0-update9 | No fix listed |
| sun jdk | = 1.5.0 | No fix listed |
| sun jdk | = 1.5.0-update1 | No fix listed |
| sun jdk | = 1.5.0-update10 | No fix listed |
| sun jdk | = 1.5.0-update2 | No fix listed |
| sun jdk | = 1.5.0-update3 | No fix listed |
| sun jdk | = 1.5.0-update4 | No fix listed |
| sun jdk | = 1.5.0-update5 | No fix listed |
| sun jdk | = 1.5.0-update6 | No fix listed |
| sun jdk | = 1.5.0-update7 | No fix listed |
| sun jdk | = 1.5.0-update7_b03 | No fix listed |
| sun jdk | = 1.5.0-update8 | No fix listed |
| sun jdk | = 1.5.0-update9 | No fix listed |
| sun sdk | = 1.3.1 | No fix listed |
| sun sdk | = 1.3.1_01 | No fix listed |
| sun sdk | = 1.3.1_01a | No fix listed |
| sun sdk | = 1.3.1_02 | No fix listed |
| sun sdk | = 1.3.1_03 | No fix listed |
| sun sdk | = 1.3.1_04 | No fix listed |
| sun sdk | = 1.3.1_05 | No fix listed |
| sun sdk | = 1.3.1_06 | No fix listed |
| sun sdk | = 1.3.1_07 | No fix listed |
| sun sdk | = 1.3.1_08 | No fix listed |
| sun sdk | = 1.3.1_09 | No fix listed |
| sun sdk | = 1.3.1_10 | No fix listed |
| sun sdk | = 1.3.1_11 | No fix listed |
| sun sdk | = 1.3.1_12 | No fix listed |
| sun sdk | = 1.3.1_13 | No fix listed |
| sun sdk | = 1.3.1_14 | No fix listed |
| sun sdk | = 1.3.1_15 | No fix listed |
| sun sdk | = 1.3.1_16 | No fix listed |
| sun sdk | = 1.3.1_17 | No fix listed |
| sun sdk | = 1.3.1_18 | No fix listed |
| sun sdk | = 1.3.1_19 | No fix listed |
| sun sdk | = 1.3.1_20 | No fix listed |
| sun sdk | = 1.3.1_21 | No fix listed |
| sun sdk | = 1.3.1_22 | No fix listed |
| sun sdk | = 1.3.1_23 | No fix listed |
| sun sdk | = 1.4.2 | No fix listed |
| sun sdk | = 1.4.2_1 | No fix listed |
| sun sdk | = 1.4.2_2 | No fix listed |
| sun sdk | = 1.4.2_02 | No fix listed |
| sun sdk | = 1.4.2_03 | No fix listed |
| sun sdk | = 1.4.2_3 | No fix listed |
| sun sdk | = 1.4.2_04 | No fix listed |
| sun sdk | = 1.4.2_4 | No fix listed |
| sun sdk | = 1.4.2_5 | No fix listed |
| sun sdk | = 1.4.2_6 | No fix listed |
| sun sdk | = 1.4.2_7 | No fix listed |
| sun sdk | = 1.4.2_8 | No fix listed |
| sun sdk | = 1.4.2_08 | No fix listed |
| sun sdk | = 1.4.2_09 | No fix listed |
| sun sdk | = 1.4.2_9 | No fix listed |
| sun sdk | = 1.4.2_10 | No fix listed |
| sun sdk | = 1.4.2_11 | No fix listed |
| sun sdk | = 1.4.2_12 | No fix listed |
| sun sdk | = 1.4.2_13 | No fix listed |
| sun sdk | = 1.4.2_14 | No fix listed |
| sun sdk | = 1.4.2_15 | No fix listed |
| sun sdk | = 1.4.2_16 | No fix listed |
| sun sdk | = 1.4.2_17 | No fix listed |
| sun sdk | = 1.4.2_18 | No fix listed |
References
- APPLE-SA-2008-09-24 mailing-list third-party-advisory vendor-advisory
- SUSE-SA:2008:042 mailing-list third-party-advisory vendor-advisory
- SUSE-SA:2008:043 mailing-list third-party-advisory vendor-advisory
- SUSE-SA:2008:045 mailing-list third-party-advisory vendor-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and mailing-list third-party-advisory
- 31010 third-party-advisory
- 31320 third-party-advisory
- 31497 third-party-advisory
- 31600 third-party-advisory
- 31736 third-party-advisory
- 32018 third-party-advisory
- 32179 third-party-advisory
- 32180 third-party-advisory
- 33236 third-party-advisory
- 33237 third-party-advisory
- 37386 third-party-advisory
- GLSA-200911-02 third-party-advisory vendor-advisory
- 238666 broken-link vendor-advisory
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- support.avaya.com third-party-advisory
- support.avaya.com third-party-advisory
- support.nortel.com third-party-advisory
- support.nortel.com third-party-advisory
- RHSA-2008:0790 third-party-advisory vendor-advisory
- RHSA-2008:1043 third-party-advisory vendor-advisory
- RHSA-2008:1044 third-party-advisory vendor-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues mailing-list third-party-advisory vdb-entry
- 30147 third-party-advisory vdb-entry
- 1020461 third-party-advisory vdb-entry
- TA08-193A third-party-advisory us-government-resource
- www.vmware.com third-party-advisory
- ADV-2008-2056 third-party-advisory vdb-entry
- ADV-2008-2740 third-party-advisory vdb-entry
- sun-jre-font-bo(43656) vdb-entry