PT-2008-2778 · Sun · Sun Java Runtime Environment

Publicado 2008-03-06 · Atualizado 2019-07-31 · CVE-2008-1185

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Java Runtime Environment (JRE) versions 6 Update 4 and earlier Sun Java Runtime Environment (JRE) versions 5.0 Update 14 and earlier Sun Java Runtime Environment (JRE) versions 1.4.2 16 and earlier

Description The issue allows remote attackers to gain privileges via an untrusted application or applet.

Recommendations For versions 6 Update 4 and earlier, update to a version later than 6 Update 4. For versions 5.0 Update 14 and earlier, update to a version later than 5.0 Update 14. For versions 1.4.2 16 and earlier, update to a version later than 1.4.2 16.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-1185

RHSA-2008:0186

Produtos afetados

Sun Java Runtime Environment

Referências · 26

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1185 · Nota
• http://gentoo.org/security/en/glsa/glsa-200804-20.xml · Aviso do Fabricante
• http://support.apple.com/kb/HT3179 · Nota
• http://vupen.com/english/advisories/2008/0770/references · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1185 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA08-066A.html · Nota
• http://secunia.com/advisories/32018 · Nota
• http://securitytracker.com/id?1019555 · Nota
• http://secunia.com/advisories/29858 · Nota
• http://secunia.com/advisories/29582 · Nota
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41138 · Nota
• http://security.gentoo.org/glsa/glsa-200804-28.xml · Aviso do Fabricante
• http://secunia.com/advisories/30780 · Nota
• http://support.apple.com/kb/HT3178 · Nota