PT-2008-2780 · Sun · Sun Java Runtime Environment+1

Publicado

2008-03-06

·

Atualizado

2017-09-29

·

CVE-2008-1187

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Sun Java Runtime Environment (JRE) and JDK versions 6 Update 4 and earlier Sun Java Runtime Environment (JRE) and JDK versions 5.0 Update 14 and earlier Sun Java Runtime Environment (JRE) and JDK versions 1.4.2 16 and earlier
Description The issue allows remote attackers to cause a denial of service, potentially leading to a crash, and may also enable the execution of arbitrary code. This is related to XSLT transforms, but the specific vectors are unknown.
Recommendations For versions 6 Update 4 and earlier, update to a version later than Update 4 to resolve the issue. For versions 5.0 Update 14 and earlier, update to a version later than Update 14 to resolve the issue. For versions 1.4.2 16 and earlier, update to a version later than 1.4.2 16 to resolve the issue.

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-1187
RHSA-2008:0186
RHSA-2008:0210
RHSA-2008:0243
RHSA-2008:0244
RHSA-2008:0245
RHSA-2008:0267
RHSA-2008:0555
RHSA-2008:0638

Produtos afetados

Jdk
Sun Java Runtime Environment