PT-2008-2789 · Oracle · Java Web Start

Will Dormann

·

Publicado

2008-03-06

·

Atualizado

2019-07-31

·

CVE-2008-1196

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Java Web Start (javaws.exe) versions prior to 6 Update 5 Java Web Start (javaws.exe) versions prior to 5.0 Update 15 Java Web Start (javaws.exe) versions prior to 1.4.2 17
Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a crafted JNLP file.
Recommendations For versions prior to 6 Update 5, update to version 6 Update 5 or later to resolve the issue. For versions prior to 5.0 Update 15, update to version 5.0 Update 15 or later to resolve the issue. For versions prior to 1.4.2 17, update to version 1.4.2 17 or later to resolve the issue.

Correção

RCE

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-1196
RHSA-2008:0186
RHSA-2008:0210
RHSA-2008:0267
RHSA-2008:0555
RHSA-2008:0638

Produtos afetados

Java Web Start