← Back

CVE-2008-3111

nvd nist
Published: Jul 9, 2008Modified: Apr 23, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by (a) an application that grants itself privileges to (1) read local files, (2) write to local files, or (3) execute local programs; and as demonstrated by (b) a long value associated with a java-vm-args attribute in a j2se tag in a JNLP file, which triggers a stack-based buffer overflow in the GetVMArgsOption function; aka CR 6557220.

Affected (73)

Products: Sun: Jdk, Jre, Sdk
Sun
3 products
Jdk
Jre
Sdk
Configuration A
73 vulnerable
Vulnerable SoftwareAffected Versions
Sun
Jdk
Version 5.0 update_10
Jdk
Version 5.0 update_11
Jdk
Version 5.0 update_12
Jdk
Version 5.0 update_13
Jdk
Version 5.0 update_14
Jdk
Version 5.0 update_15
Jdk
Version 5.0 update_1
Jdk
Version 5.0 update_2
Jdk
Version 5.0 update_3
Jdk
Version 5.0 update_4
Jdk
Version 5.0 update_5
Jdk
Version 5.0 update_6
Jdk
Version 5.0 update_7
Jdk
Version 5.0 update_8
Jdk
Version 5.0 update_9
Jdk
Version 6 update_1
Jdk
Version 6 update_2
Jdk
Version 6 update_3
Sun
Jre
Version 1.4.2_01
Jre
Version 1.4.2_02
Jre
Version 1.4.2_03
Jre
Version 1.4.2_04
Jre
Version 1.4.2_05
Jre
Version 1.4.2_06
Jre
Version 1.4.2_07
Jre
Version 1.4.2_10
Jre
Version 1.4.2_11
Jre
Version 1.4.2_12
Jre
Version 1.4.2_13
Jre
Version 1.4.2_14
Jre
Version 1.4.2_15
Jre
Version 1.4.2_16
Jre
Version 1.4.2_17
Jre
Version 1.4.2_8
Jre
Version 1.4.2_9
Jre
Version 1.4
Jre
Version 5.0 update_10
Jre
Version 5.0 update_11
Jre
Version 5.0 update_12
Jre
Version 5.0 update_13
Jre
Version 5.0 update_14
Jre
Version 5.0 update_15
Jre
Version 5.0 update_1
Jre
Version 5.0 update_2
Jre
Version 5.0 update_3
Jre
Version 5.0 update_4
Jre
Version 5.0 update_5
Jre
Version 5.0 update_6
Jre
Version 5.0 update_7
Jre
Version 5.0 update_8
Jre
Version 5.0 update_9
Jre
Version 6 update_1
Jre
Version 6 update_2
Jre
Version 6 update_3
Sun
Sdk
Version 1.4.2
Sdk
Version 1.4.2_01
Sdk
Version 1.4.2_02
Sdk
Version 1.4.2_03
Sdk
Version 1.4.2_04
Sdk
Version 1.4.2_05
Sdk
Version 1.4.2_06
Sdk
Version 1.4.2_07
Sdk
Version 1.4.2_08
Sdk
Version 1.4.2_09
Sdk
Version 1.4.2_10
Sdk
Version 1.4.2_11
Sdk
Version 1.4.2_12
Sdk
Version 1.4.2_13
Sdk
Version 1.4.2_14
Sdk
Version 1.4.2_15
Sdk
Version 1.4.2_16
Sdk
Version 1.4.2_17
Sdk
Version 1.4

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (64)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.