PT-2008-2783 · Sun · Jre+1

John Heasman · Publicado 2008-03-06 · Atualizado 2019-07-31 · CVE-2008-1190

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun JDK and JRE versions 6 Update 4 and earlier Sun JDK and JRE versions 5.0 Update 14 and earlier Sun SDK/JRE version 1.4.2 16 and earlier

Description The issue allows remote attackers to gain privileges via an untrusted application.

Recommendations For Sun JDK and JRE versions 6 Update 4 and earlier, update to a version later than Update 4. For Sun JDK and JRE versions 5.0 Update 14 and earlier, update to a version later than Update 14. For Sun SDK/JRE version 1.4.2 16 and earlier, update to a version later than 1.4.2 16.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-1190

RHSA-2008:0132

RHSA-2008:0186

RHSA-2008:0210

RHSA-2008:0267

RHSA-2008:0638

Produtos afetados

Jdk

Jre

Referências · 31

• http://secunia.com/advisories/31497 · Nota
• http://gentoo.org/security/en/glsa/glsa-200804-20.xml · Aviso do Fabricante
• http://secunia.com/advisories/29498 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1190 · Nota de Segurança
• http://support.apple.com/kb/HT3179 · Nota
• http://vupen.com/english/advisories/2008/0770/references · Nota
• http://securitytracker.com/id?1019549 · Nota
• http://redhat.com/support/errata/RHSA-2008-0210.html · Aviso do Fabricante
• http://secunia.com/advisories/32018 · Nota
• http://us-cert.gov/cas/techalerts/TA08-066A.html · Nota
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html · Aviso do Fabricante
• http://secunia.com/advisories/29858 · Nota
• http://secunia.com/advisories/29582 · Nota
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9914 · Nota