PT-2008-2783 · Sun · Jre+1

John Heasman · Published 2008-03-06 · Updated 2019-07-31 · CVE-2008-1190

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun JDK and JRE versions 6 Update 4 and earlier Sun JDK and JRE versions 5.0 Update 14 and earlier Sun SDK/JRE version 1.4.2 16 and earlier

Description The issue allows remote attackers to gain privileges via an untrusted application.

Recommendations For Sun JDK and JRE versions 6 Update 4 and earlier, update to a version later than Update 4. For Sun JDK and JRE versions 5.0 Update 14 and earlier, update to a version later than Update 14. For Sun SDK/JRE version 1.4.2 16 and earlier, update to a version later than 1.4.2 16.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-1190

RHSA-2008:0132

RHSA-2008:0186

RHSA-2008:0210

RHSA-2008:0267

RHSA-2008:0638

Affected Products

Jdk

Jre

References · 31

• http://gentoo.org/security/en/glsa/glsa-200804-20.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1190 · Security Note
• http://redhat.com/support/errata/RHSA-2008-0210.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200804-28.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0267.html · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200806-11.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0186.html · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-233323-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html · Vendor Advisory
• http://secunia.com/advisories/31497 · Note
• http://secunia.com/advisories/29498 · Note
• http://support.apple.com/kb/HT3179 · Note
• http://vupen.com/english/advisories/2008/0770/references · Note