CVE-2008-0657

EUVD-2008-0667
Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
Affected Products (NVD)
VendorProductVersion
sunjre
𝑥
≤ 1.5.0
sunjre
𝑥
≤ 1.6.0
sunjdk
𝑥
≤ 5.0_update13
sunjre
𝑥
≤ 1.6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sun-java5
dapper
ignored
edgy
ignored
feisty
ignored
gutsy
ignored
hardy
Fixed 1.5.0-14-0ubuntu1
released
intrepid
Fixed 1.5.0-14-0ubuntu1
released
jaunty
Fixed 1.5.0-14-0ubuntu1
released
karmic
dne
sun-java6
dapper
dne
edgy
dne
feisty
ignored
gutsy
Fixed 6-02-0ubuntu1
released
hardy
Fixed 6-02-0ubuntu1
released
intrepid
Fixed 6-02-0ubuntu1
released
jaunty
Fixed 6-02-0ubuntu1
released
karmic
Fixed 6-02-0ubuntu1
released
Common Weakness Enumeration
References