CVE-2008-0657

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
VendorProductVersion
sunjre
𝑥
≤ 1.5.0
sunjre
𝑥
≤ 1.6.0
sunjdk
𝑥
≤ 5.0_update13
sunjre
𝑥
≤ 1.6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sun-java5
karmic
dne
jaunty
Fixed 1.5.0-14-0ubuntu1
released
intrepid
Fixed 1.5.0-14-0ubuntu1
released
hardy
Fixed 1.5.0-14-0ubuntu1
released
gutsy
ignored
feisty
ignored
edgy
ignored
dapper
ignored
sun-java6
karmic
Fixed 6-02-0ubuntu1
released
jaunty
Fixed 6-02-0ubuntu1
released
intrepid
Fixed 6-02-0ubuntu1
released
hardy
Fixed 6-02-0ubuntu1
released
gutsy
Fixed 6-02-0ubuntu1
released
feisty
ignored
edgy
dne
dapper
dne
Common Weakness Enumeration
References