CVE-2008-5352 Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 1...
HighCVSS 9.3
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jdk | <= 5.0 | No fix listed |
| sun jdk | <= 6 | No fix listed |
| sun jdk | = 5.0-update_1 | No fix listed |
| sun jdk | = 5.0-update_10 | No fix listed |
| sun jdk | = 5.0-update_11 | No fix listed |
| sun jdk | = 5.0-update_12 | No fix listed |
| sun jdk | = 5.0-update_13 | No fix listed |
| sun jdk | = 5.0-update_14 | No fix listed |
| sun jdk | = 5.0-update_15 | No fix listed |
| sun jdk | = 5.0-update_2 | No fix listed |
| sun jdk | = 5.0-update_3 | No fix listed |
| sun jdk | = 6 | No fix listed |
| sun jdk | = 6-update_1 | No fix listed |
| sun jdk | = 6-update_2 | No fix listed |
| sun jdk | = 6-update_3 | No fix listed |
| sun jdk | = 6-update_4 | No fix listed |
| sun jdk | = 6-update_5 | No fix listed |
| sun jdk | = 6-update_6 | No fix listed |
| sun jdk | = 6-update_7 | No fix listed |
| sun jdk | = 6-update_8 | No fix listed |
| sun jre | <= 5.0 | No fix listed |
| sun jre | <= 6 | No fix listed |
| sun jre | = 5.0 | No fix listed |
| sun jre | = 5.0-update_1 | No fix listed |
| sun jre | = 5.0-update_10 | No fix listed |
Show 15 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 5.0-update_11 | No fix listed |
| sun jre | = 5.0-update_12 | No fix listed |
| sun jre | = 5.0-update_13 | No fix listed |
| sun jre | = 5.0-update_14 | No fix listed |
| sun jre | = 5.0-update_15 | No fix listed |
| sun jre | = 5.0-update_2 | No fix listed |
| sun jre | = 6 | No fix listed |
| sun jre | = 6-update_1 | No fix listed |
| sun jre | = 6-update_2 | No fix listed |
| sun jre | = 6-update_3 | No fix listed |
| sun jre | = 6-update_4 | No fix listed |
| sun jre | = 6-update_5 | No fix listed |
| sun jre | = 6-update_6 | No fix listed |
| sun jre | = 6-update_7 | No fix listed |
| sun jre | = 6-update_8 | No fix listed |
References
- 20081204 Sun Java JRE Pack200 Decompression Integer Overflow Vulnerability third-party-advisory
- SUSE-SA:2009:007 vendor-advisory
- SUSE-SR:2009:006 vendor-advisory
- 50501 vdb-entry
- RHSA-2008:1018 vendor-advisory
- RHSA-2008:1025 vendor-advisory
- 32991 third-party-advisory
- 33015 third-party-advisory
- 33528 third-party-advisory
- 33709 third-party-advisory
- 33710 third-party-advisory
- 34259 third-party-advisory
- 34972 third-party-advisory
- 37386 third-party-advisory
- GLSA-200911-02 vendor-advisory
- 244992 patch vendor-advisory
- support.avaya.com
- support.nortel.com
- RHSA-2009:0015 vendor-advisory
- RHSA-2009:0016 vendor-advisory
- 32608 vdb-entry
- 1021312 vdb-entry
- TA08-340A third-party-advisory us-government-resource
- ADV-2008-3339 vdb-entry
- www116.nortel.com
- oval:org.mitre.oval:def:6383 signature vdb-entry
- RHSA-2009:0466 vendor-advisory