PT-2008-2788 · Sun · Java Runtime Environment+1

Gregory Fleischer · Published 2008-03-06 · Updated 2019-07-31 · CVE-2008-1195

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun JDK and Java Runtime Environment (JRE) versions 6 Update 4 and earlier Sun JDK and Java Runtime Environment (JRE) versions 5.0 Update 14 and earlier Sun JDK and Java Runtime Environment (JRE) versions 1.4.2 16 and earlier

Description The issue allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.

Recommendations For versions 6 Update 4 and earlier, update to a version later than Update 4. For versions 5.0 Update 14 and earlier, update to a version later than Update 14. For versions 1.4.2 16 and earlier, update to a version later than 1.4.2 16.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2008-1195

RHSA-2008:0132

RHSA-2008:0186

RHSA-2008:0210

RHSA-2008:0267

RHSA-2008:0638

Affected Products

Jdk

Java Runtime Environment

References · 47

• http://gentoo.org/security/en/glsa/glsa-200804-20.xml · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html · Vendor Advisory
• http://ubuntu.com/usn/usn-592-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1195 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-233326-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0210.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200804-28.xml · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0267.html · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:080 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200806-11.xml · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0186.html · Vendor Advisory