Vulnerability in Sun Jdk

CVE-2008-1186

Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.2_16 and earlier, allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1185, aka "the second issue."

EPSS: 0.056 (92.0th percentile) — read the EPSS interpretation.

Affected products

  • Sun Jdk — versions 1.5.0
  • Sun Jre — versions 1.4.2, 1.4.2_1, 1.4.2_2
  • Sun Sdk — versions 1.4.2, 1.4.2_1, 1.4.2_2
  • N/a — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

References

  • cve@mitre.org (vendor-advisory, x_refsource_APPLE, Mailing List, Third Party Advisory)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
  • cve@mitre.org (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
  • cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
  • cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2008-1186?
CVE-2008-1186 is a vulnerability in Sun Jdk, classified under CWE-264. Published 2008-03-06.
Is CVE-2008-1186 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.