PT-2008-6482 · Sun+2 · Java Runtime Environment+2

Publicado 2008-12-05 · Atualizado 2017-09-29 · CVE-2008-5358

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Java Runtime Environment (JRE) for Sun JDK and JRE versions 6 Update 10 and earlier

Description The issue allows remote attackers to execute arbitrary code via a crafted GIF file, triggering memory corruption during the display of the splash screen, possibly related to splashscreen.dll.

Recommendations For Java Runtime Environment (JRE) for Sun JDK and JRE versions 6 Update 10 and earlier, update to a version later than 6 Update 10 to resolve the issue.

Exploit

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-5358

HPSBUX02411

RHSA-2008:1018

RHSA-2009:0369

Produtos afetados

Hp-Ux

Java Platform

Java Runtime Environment

Referências · 53

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_calendar_deserialize.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357 · Nota de Segurança
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=758 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm · Nota
• http://osvdb.org/50515 · Nota
• http://vupen.com/english/advisories/2008/3339 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47049 · Nota
• http://secunia.com/advisories/34233 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345 · Nota de Segurança
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMTY4MzAyNg%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343 · Nota de Segurança
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1 · Aviso do Fabricante