PT-2008-2786 · Oracle · Java Runtime Environment

Publicado

2008-03-06

·

Atualizado

2019-07-31

·

CVE-2008-1193

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Java Runtime Environment versions prior to 6 Update 5 Java Runtime Environment versions prior to 5.0 Update 15
Description The issue allows remote attackers to gain privileges via an untrusted application, leveraging an unspecified vulnerability in the Java Runtime Environment Image Parsing Library.
Recommendations For versions prior to 6 Update 5, update to Java Runtime Environment 6 Update 5 or later. For versions prior to 5.0 Update 15, update to Java Runtime Environment 5.0 Update 15 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-1193
RHSA-2008:0186
RHSA-2008:0210
RHSA-2008:0244
RHSA-2008:0245
RHSA-2008:0267
RHSA-2008:0638

Produtos afetados

Java Runtime Environment