Vulnerability in Sun Jdk

CVE-2008-3107

Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.

EPSS: 0.036 (88.4th percentile) — read the EPSS interpretation.

Affected products

Sun Jdk — versions 5.0, 6
Sun Jre — versions 1.4.2, 1.4.2_01, 1.4.2_02
Sun Sdk — versions 1.4.2_02, 1.4.2_03, 1.4.2_04
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (vendor-advisory, x_refsource_SUNALERT)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vendor-advisory, x_refsource_APPLE)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (vendor-advisory, x_refsource_SUSE)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)