CVE-2008-5359 Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and ear...
HighCVSS 9.3
EPSS 10.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the Java AWT library.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 1.3.1 | No fix listed |
| sun jre | = 1.3.1_2 | No fix listed |
| sun jre | = 1.3.1_03 | No fix listed |
| sun jre | = 1.3.1_04 | No fix listed |
| sun jre | = 1.3.1_05 | No fix listed |
| sun jre | = 1.3.1_06 | No fix listed |
| sun jre | = 1.3.1_07 | No fix listed |
| sun jre | = 1.3.1_08 | No fix listed |
| sun jre | = 1.3.1_09 | No fix listed |
| sun jre | = 1.3.1_10 | No fix listed |
| sun jre | = 1.3.1_11 | No fix listed |
| sun jre | = 1.3.1_12 | No fix listed |
| sun jre | = 1.3.1_13 | No fix listed |
| sun jre | = 1.3.1_14 | No fix listed |
| sun jre | = 1.3.1_15 | No fix listed |
| sun jre | = 1.3.1_16 | No fix listed |
| sun jre | = 1.3.1_17 | No fix listed |
| sun jre | = 1.3.1_18 | No fix listed |
| sun jre | = 1.3.1_19 | No fix listed |
| sun jre | = 1.3.1_20 | No fix listed |
| sun jre | = 1.3.1_21 | No fix listed |
| sun jre | = 1.3.1_22 | No fix listed |
| sun jre | = 1.3.1_23 | No fix listed |
| sun jre | = 1.4.2 | No fix listed |
| sun jre | = 1.4.2_1 | No fix listed |
Show 103 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jre | = 1.4.2_2 | No fix listed |
| sun jre | = 1.4.2_3 | No fix listed |
| sun jre | = 1.4.2_4 | No fix listed |
| sun jre | = 1.4.2_5 | No fix listed |
| sun jre | = 1.4.2_6 | No fix listed |
| sun jre | = 1.4.2_7 | No fix listed |
| sun jre | = 1.4.2_8 | No fix listed |
| sun jre | = 1.4.2_9 | No fix listed |
| sun jre | = 1.4.2_10 | No fix listed |
| sun jre | = 1.4.2_11 | No fix listed |
| sun jre | = 1.4.2_12 | No fix listed |
| sun jre | = 1.4.2_13 | No fix listed |
| sun jre | = 1.4.2_14 | No fix listed |
| sun jre | = 1.4.2_15 | No fix listed |
| sun jre | = 1.4.2_16 | No fix listed |
| sun jre | = 1.4.2_17 | No fix listed |
| sun jre | = 1.4.2_18 | No fix listed |
| sun jre | = 1.5.0 | No fix listed |
| sun jre | = 1.5.0-update1 | No fix listed |
| sun jre | = 1.5.0-update10 | No fix listed |
| sun jre | = 1.5.0-update11 | No fix listed |
| sun jre | = 1.5.0-update12 | No fix listed |
| sun jre | = 1.5.0-update13 | No fix listed |
| sun jre | = 1.5.0-update14 | No fix listed |
| sun jre | = 1.5.0-update15 | No fix listed |
| sun jre | = 1.5.0-update16 | No fix listed |
| sun jre | = 1.5.0-update2 | No fix listed |
| sun jre | = 1.6.0 | No fix listed |
| sun jre | = 1.6.0-update_1 | No fix listed |
| sun jre | = 1.6.0-update_10 | No fix listed |
| sun jre | = 1.6.0-update_2 | No fix listed |
| sun jre | = 1.6.0-update_3 | No fix listed |
| sun jre | = 1.6.0-update_4 | No fix listed |
| sun jre | = 1.6.0-update_5 | No fix listed |
| sun jre | = 1.6.0-update_6 | No fix listed |
| sun jdk | = 1.5.0 | No fix listed |
| sun jdk | = 1.5.0-update1 | No fix listed |
| sun jdk | = 1.5.0-update10 | No fix listed |
| sun jdk | = 1.5.0-update2 | No fix listed |
| sun jdk | = 1.5.0-update3 | No fix listed |
| sun jdk | = 1.5.0-update4 | No fix listed |
| sun jdk | = 1.5.0-update5 | No fix listed |
| sun jdk | = 1.5.0-update6 | No fix listed |
| sun jdk | = 1.5.0-update7 | No fix listed |
| sun jdk | = 1.5.0-update7_b03 | No fix listed |
| sun jdk | = 1.5.0-update8 | No fix listed |
| sun jdk | = 1.5.0-update9 | No fix listed |
| sun jdk | = 1.6.0 | No fix listed |
| sun jdk | = 1.6.0-update_10 | No fix listed |
| sun jdk | = 1.6.0-update_3 | No fix listed |
| sun jdk | = 1.6.0-update_4 | No fix listed |
| sun jdk | = 1.6.0-update_5 | No fix listed |
| sun jdk | = 1.6.0-update_6 | No fix listed |
| sun jdk | = 1.6.0-update_7 | No fix listed |
| sun sdk | = 1.3.1 | No fix listed |
| sun sdk | = 1.3.1_01 | No fix listed |
| sun sdk | = 1.3.1_01a | No fix listed |
| sun sdk | = 1.3.1_02 | No fix listed |
| sun sdk | = 1.3.1_03 | No fix listed |
| sun sdk | = 1.3.1_04 | No fix listed |
| sun sdk | = 1.3.1_05 | No fix listed |
| sun sdk | = 1.3.1_06 | No fix listed |
| sun sdk | = 1.3.1_07 | No fix listed |
| sun sdk | = 1.3.1_08 | No fix listed |
| sun sdk | = 1.3.1_09 | No fix listed |
| sun sdk | = 1.3.1_10 | No fix listed |
| sun sdk | = 1.3.1_11 | No fix listed |
| sun sdk | = 1.3.1_12 | No fix listed |
| sun sdk | = 1.3.1_13 | No fix listed |
| sun sdk | = 1.3.1_14 | No fix listed |
| sun sdk | = 1.3.1_15 | No fix listed |
| sun sdk | = 1.3.1_16 | No fix listed |
| sun sdk | = 1.3.1_17 | No fix listed |
| sun sdk | = 1.3.1_18 | No fix listed |
| sun sdk | = 1.3.1_19 | No fix listed |
| sun sdk | = 1.3.1_20 | No fix listed |
| sun sdk | = 1.3.1_21 | No fix listed |
| sun sdk | = 1.3.1_22 | No fix listed |
| sun sdk | = 1.3.1_23 | No fix listed |
| sun sdk | = 1.4.2 | No fix listed |
| sun sdk | = 1.4.2_1 | No fix listed |
| sun sdk | = 1.4.2_2 | No fix listed |
| sun sdk | = 1.4.2_02 | No fix listed |
| sun sdk | = 1.4.2_03 | No fix listed |
| sun sdk | = 1.4.2_3 | No fix listed |
| sun sdk | = 1.4.2_04 | No fix listed |
| sun sdk | = 1.4.2_4 | No fix listed |
| sun sdk | = 1.4.2_5 | No fix listed |
| sun sdk | = 1.4.2_6 | No fix listed |
| sun sdk | = 1.4.2_7 | No fix listed |
| sun sdk | = 1.4.2_8 | No fix listed |
| sun sdk | = 1.4.2_08 | No fix listed |
| sun sdk | = 1.4.2_09 | No fix listed |
| sun sdk | = 1.4.2_9 | No fix listed |
| sun sdk | = 1.4.2_10 | No fix listed |
| sun sdk | = 1.4.2_11 | No fix listed |
| sun sdk | = 1.4.2_12 | No fix listed |
| sun sdk | = 1.4.2_13 | No fix listed |
| sun sdk | = 1.4.2_14 | No fix listed |
| sun sdk | = 1.4.2_15 | No fix listed |
| sun sdk | = 1.4.2_16 | No fix listed |
| sun sdk | = 1.4.2_17 | No fix listed |
| sun sdk | = 1.4.2_18 | No fix listed |
References
- SUSE-SA:2009:007 mailing-list third-party-advisory vendor-advisory
- SUSE-SR:2009:006 mailing-list third-party-advisory vendor-advisory
- SUSE-SA:2009:018 mailing-list third-party-advisory vendor-advisory
- SUSE-SR:2009:010 mailing-list third-party-advisory vendor-advisory
- SSRT080111 mailing-list third-party-advisory vendor-advisory
- SSRT090049 mailing-list third-party-advisory vendor-advisory
- RHSA-2008:1018 third-party-advisory vendor-advisory
- RHSA-2008:1025 third-party-advisory vendor-advisory
- 32991 third-party-advisory
- 33015 third-party-advisory
- 33187 third-party-advisory
- 33528 third-party-advisory
- 33709 third-party-advisory
- 33710 third-party-advisory
- 34233 third-party-advisory
- 34259 third-party-advisory
- 34605 third-party-advisory
- 34889 third-party-advisory
- 34972 third-party-advisory
- 35065 third-party-advisory
- 37386 third-party-advisory
- 38539 third-party-advisory
- GLSA-200911-02 third-party-advisory vendor-advisory
- 244987 patch vendor-advisory
- support.avaya.com third-party-advisory
- support.avaya.com third-party-advisory
- support.nortel.com third-party-advisory
- RHSA-2009:0015 third-party-advisory vendor-advisory
- RHSA-2009:0016 third-party-advisory vendor-advisory
- RHSA-2009:0445 third-party-advisory vendor-advisory
- 32608 third-party-advisory vdb-entry
- TA08-340A third-party-advisory us-government-resource
- ADV-2008-3339 third-party-advisory vdb-entry
- ADV-2009-0672 third-party-advisory vdb-entry
- www.zerodayinitiative.com third-party-advisory vdb-entry
- www116.nortel.com third-party-advisory
- jre-image-processing-privilege-escalation(47048) mailing-list third-party-advisory vdb-entry
- oval:org.mitre.oval:def:5841 signature third-party-advisory vdb-entry
- RHSA-2009:0466 third-party-advisory vendor-advisory