Skip to content

CVE-2008-5355 The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify th...

HighCVSS 10.0 EPSS 8.2%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to execute arbitrary code via DNS man-in-the-middle attacks.

Affected products

ProductAffected versionsFixed in
sun jdk <= 5.0 No fix listed
sun jdk <= 6 No fix listed
sun jdk = 5.0-update_1 No fix listed
sun jdk = 5.0-update_10 No fix listed
sun jdk = 5.0-update_11 No fix listed
sun jdk = 5.0-update_12 No fix listed
sun jdk = 5.0-update_13 No fix listed
sun jdk = 5.0-update_14 No fix listed
sun jdk = 5.0-update_15 No fix listed
sun jdk = 5.0-update_2 No fix listed
sun jdk = 5.0-update_3 No fix listed
sun jdk = 5.0-update_4 No fix listed
sun jdk = 5.0-update_5 No fix listed
sun jdk = 5.0-update_6 No fix listed
sun jdk = 5.0-update_7 No fix listed
sun jdk = 5.0-update_8 No fix listed
sun jdk = 5.0-update_9 No fix listed
sun jdk = 6 No fix listed
sun jdk = 6-update_1 No fix listed
sun jdk = 6-update_2 No fix listed
sun jdk = 6-update_3 No fix listed
sun jdk = 6-update_4 No fix listed
sun jdk = 6-update_5 No fix listed
sun jdk = 6-update_6 No fix listed
sun jdk = 6-update_7 No fix listed
Show 66 more
ProductAffected versionsFixed in
sun jdk = 6-update_8 No fix listed
sun jdk = 6-update_9 No fix listed
sun jre <= 1.4.2_18 No fix listed
sun jre <= 5.0 No fix listed
sun jre <= 6 No fix listed
sun jre = 1.4.2_1 No fix listed
sun jre = 1.4.2_2 No fix listed
sun jre = 1.4.2_3 No fix listed
sun jre = 1.4.2_4 No fix listed
sun jre = 1.4.2_5 No fix listed
sun jre = 1.4.2_6 No fix listed
sun jre = 1.4.2_7 No fix listed
sun jre = 1.4.2_8 No fix listed
sun jre = 1.4.2_9 No fix listed
sun jre = 1.4.2_10 No fix listed
sun jre = 1.4.2_11 No fix listed
sun jre = 1.4.2_12 No fix listed
sun jre = 1.4.2_13 No fix listed
sun jre = 1.4.2_14 No fix listed
sun jre = 1.4.2_15 No fix listed
sun jre = 1.4.2_16 No fix listed
sun jre = 1.4.2_17 No fix listed
sun jre = 5.0 No fix listed
sun jre = 5.0-update_1 No fix listed
sun jre = 5.0-update_10 No fix listed
sun jre = 5.0-update_11 No fix listed
sun jre = 5.0-update_12 No fix listed
sun jre = 5.0-update_13 No fix listed
sun jre = 5.0-update_14 No fix listed
sun jre = 5.0-update_15 No fix listed
sun jre = 5.0-update_2 No fix listed
sun jre = 5.0-update_3 No fix listed
sun jre = 5.0-update_4 No fix listed
sun jre = 5.0-update_5 No fix listed
sun jre = 5.0-update_6 No fix listed
sun jre = 5.0-update_7 No fix listed
sun jre = 5.0-update_8 No fix listed
sun jre = 5.0-update_9 No fix listed
sun jre = 6 No fix listed
sun jre = 6-update_1 No fix listed
sun jre = 6-update_2 No fix listed
sun jre = 6-update_3 No fix listed
sun jre = 6-update_4 No fix listed
sun jre = 6-update_5 No fix listed
sun jre = 6-update_6 No fix listed
sun jre = 6-update_7 No fix listed
sun jre = 6-update_8 No fix listed
sun jre = 6-update_9 No fix listed
sun sdk <= 1.4.2_18 No fix listed
sun sdk = 1.4.2_1 No fix listed
sun sdk = 1.4.2_2 No fix listed
sun sdk = 1.4.2_3 No fix listed
sun sdk = 1.4.2_4 No fix listed
sun sdk = 1.4.2_5 No fix listed
sun sdk = 1.4.2_6 No fix listed
sun sdk = 1.4.2_7 No fix listed
sun sdk = 1.4.2_8 No fix listed
sun sdk = 1.4.2_9 No fix listed
sun sdk = 1.4.2_10 No fix listed
sun sdk = 1.4.2_11 No fix listed
sun sdk = 1.4.2_12 No fix listed
sun sdk = 1.4.2_13 No fix listed
sun sdk = 1.4.2_14 No fix listed
sun sdk = 1.4.2_15 No fix listed
sun sdk = 1.4.2_16 No fix listed
sun sdk = 1.4.2_17 No fix listed

References