PT-2008-6481 · Oracle+1 · Java Runtime Environment+2

Publicado 2008-12-05 · Atualizado 2019-10-09 · CVE-2008-5357

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java Runtime Environment (JRE) versions 6 Update 10 and earlier Java Runtime Environment (JRE) versions 5.0 Update 16 and earlier Java Runtime Environment (JRE) versions 1.4.2 18 and earlier Java Runtime Environment (JRE) versions 1.3.1 23 and earlier

Description The issue is related to an integer overflow in the Java Runtime Environment, which could allow remote attackers to execute arbitrary code. This is achieved through a crafted TrueType font file that triggers a heap-based buffer overflow.

Recommendations For Java Runtime Environment (JRE) versions 6 Update 10 and earlier, update to a version later than Update 10. For Java Runtime Environment (JRE) versions 5.0 Update 16 and earlier, update to a version later than Update 16. For Java Runtime Environment (JRE) versions 1.4.2 18 and earlier, update to a version later than 1.4.2 18. For Java Runtime Environment (JRE) versions 1.3.1 23 and earlier, update to a version later than 1.3.1 23.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-5357

HPSBUX02411

RHSA-2008:1018

RHSA-2008:1025

RHSA-2009:0016

RHSA-2009:0369

RHSA-2009:0466

Produtos afetados

Hp-Ux

Java Platform

Java Runtime Environment

Referências · 61

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_calendar_deserialize.rb · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357 · Nota de Segurança
• http://secunia.com/advisories/35065 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm · Nota
• http://vupen.com/english/advisories/2008/3339 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354 · Nota de Segurança
• http://secunia.com/advisories/34233 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345 · Nota de Segurança
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMTY4MzAyNg%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343 · Nota de Segurança
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1 · Aviso do Fabricante