CVE-2008-1193

Published: Mar 6, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to gain privileges via an untrusted application.

Affected (38)

Products: Sun: Jdk, Jre

Sun

2 products

Jdk

Jre

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Sun Jdk	Version 1.5.0
Sun Jdk	Version 1.5.0 update10
Sun Jdk	Version 1.5.0 update11
Sun Jdk	Version 1.5.0 update12
Sun Jdk	Version 1.5.0 update13
Sun Jdk	Version 1.5.0 update14
Sun Jdk	Version 1.5.0 update1
Sun Jdk	Version 1.5.0 update2
Sun Jdk	Version 1.5.0 update3
Sun Jdk	Version 1.5.0 update4
Sun Jdk	Version 1.5.0 update5
Sun Jdk	Version 1.5.0 update6
Sun Jdk	Version 1.5.0 update7
Sun Jdk	Version 1.5.0 update8
Sun Jdk	Version 1.5.0 update9
Sun Jdk	Version 1.6.0
Sun Jdk	Version 1.6.0 update_3
Sun Jdk	Version 1.6.0 update_4

Configuration B

20 vulnerable

Vulnerable Software	Affected Versions
Sun Jre	Version 1.5.0
Sun Jre	Version 1.5.0 update10
Sun Jre	Version 1.5.0 update11
Sun Jre	Version 1.5.0 update12
Sun Jre	Version 1.5.0 update13
Sun Jre	Version 1.5.0 update14
Sun Jre	Version 1.5.0 update1
Sun Jre	Version 1.5.0 update2
Sun Jre	Version 1.5.0 update3
Sun Jre	Version 1.5.0 update4
Sun Jre	Version 1.5.0 update5
Sun Jre	Version 1.5.0 update6
Sun Jre	Version 1.5.0 update7
Sun Jre	Version 1.5.0 update8
Sun Jre	Version 1.5.0 update9
Sun Jre	Version 1.6.0
Sun Jre	Version 1.6.0 update_1
Sun Jre	Version 1.6.0 update_2
Sun Jre	Version 1.6.0 update_3
Sun Jre	Version 1.6.0 update_4

Related CWEs

CWE-264

References (72)

http://dev2dev.bea.com/pub/advisory/277

Source: cve@mitre.org

Third Party Advisory

http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://secunia.com/advisories/29239

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29273

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29498

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29582

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29841

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29858

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/29897

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/30003

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/30676

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/30780

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/31497

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/32018

Source: cve@mitre.org

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200804-28.xml

Source: cve@mitre.org

Third Party Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-233325-1

Source: cve@mitre.org

PatchThird Party Advisory

http://support.apple.com/kb/HT3178

Source: cve@mitre.org

Third Party Advisory

http://support.apple.com/kb/HT3179

Source: cve@mitre.org

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml

Source: cve@mitre.org

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0186.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0210.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0244.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0245.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0267.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/28125

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1019551

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.us-cert.gov/cas/techalerts/TA08-066A.html

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

http://www.vmware.com/security/advisories/VMSA-2008-0010.html

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/0770/references

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/1252

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/1856/references

Source: cve@mitre.org

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/41028

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11409

Source: cve@mitre.org

Third Party Advisory

http://dev2dev.bea.com/pub/advisory/277