PT-2008-2788 · Sun · Java Runtime Environment+1

Gregory Fleischer · Publicado 2008-03-06 · Atualizado 2019-07-31 · CVE-2008-1195

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun JDK and Java Runtime Environment (JRE) versions 6 Update 4 and earlier Sun JDK and Java Runtime Environment (JRE) versions 5.0 Update 14 and earlier Sun JDK and Java Runtime Environment (JRE) versions 1.4.2 16 and earlier

Description The issue allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.

Recommendations For versions 6 Update 4 and earlier, update to a version later than Update 4. For versions 5.0 Update 14 and earlier, update to a version later than Update 14. For versions 1.4.2 16 and earlier, update to a version later than 1.4.2 16.

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2008-1195

RHSA-2008:0132

RHSA-2008:0186

RHSA-2008:0210

RHSA-2008:0267

RHSA-2008:0638

Produtos afetados

Jdk

Java Runtime Environment

Referências · 47

• http://secunia.com/advisories/31497 · Nota
• http://vupen.com/english/advisories/2008/0998/references · Nota
• http://secunia.com/advisories/30620 · Nota
• http://secunia.com/advisories/29560 · Nota
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 · Nota
• http://gentoo.org/security/en/glsa/glsa-200804-20.xml · Aviso do Fabricante
• http://mozilla.org/security/announce/2008/mfsa2008-18.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1195 · Nota
• http://vupen.com/english/advisories/2008/0770/references · Nota
• http://secunia.com/advisories/32018 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html · Aviso do Fabricante
• http://securitytracker.com/id?1019553 · Nota
• http://securityfocus.com/archive/1/490196/100/0/threaded · Nota
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html · Aviso do Fabricante
• http://ubuntu.com/usn/usn-592-1 · Aviso do Fabricante