PT-2008-2784 · Sun · Sun Jdk+1

Published 2008-03-06 · Updated 2017-09-29 · CVE-2008-1191

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun JDK and JRE versions 6 Update 4 and earlier

Description The issue allows remote attackers to create arbitrary files via an untrusted application.

Recommendations For Sun JDK and JRE versions 6 Update 4 and earlier, update to a version later than 6 Update 4 to resolve the issue.

Fix

Related Identifiers

CVE-2008-1191

RHSA-2008:0267

Affected Products

Sun Jdk

Sun Jre

References · 27

• http://gentoo.org/security/en/glsa/glsa-200804-20.xml · Vendor Advisory
• http://vupen.com/english/advisories/2008/0770/references · Vendor Advisory
• http://secunia.com/advisories/32018 · Vendor Advisory
• http://secunia.com/advisories/29858 · Vendor Advisory
• http://secunia.com/advisories/29582 · Vendor Advisory
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1191 · Security Note
• http://security.gentoo.org/glsa/glsa-200804-28.xml · Vendor Advisory
• http://secunia.com/advisories/30780 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0267.html · Vendor Advisory
• http://secunia.com/advisories/29273 · Vendor Advisory
• http://secunia.com/advisories/29239 · Vendor Advisory
• http://vupen.com/english/advisories/2008/1856/references · Vendor Advisory
• http://secunia.com/advisories/30676 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200806-11.xml · Vendor Advisory