CVE-2008-5358

Published: Dec 5, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.

Affected (20)

Products: Sun: Jdk, Jre

2 products

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Sun Jdk	Up to 6
Sun Jdk	Version 6
Sun Jdk	Version 6 update_1
Sun Jdk	Version 6 update_2
Sun Jdk	Version 6 update_3
Sun Jdk	Version 6 update_4
Sun Jdk	Version 6 update_5
Sun Jdk	Version 6 update_6
Sun Jdk	Version 6 update_7
Sun Jdk	Version 6 update_8
Sun Jre	Up to 6
Sun Jre	Version 6
Sun Jre	Version 6 update_1
Sun Jre	Version 6 update_2
Sun Jre	Version 6 update_3
Sun Jre	Version 6 update_4
Sun Jre	Version 6 update_5
Sun Jre	Version 6 update_6
Sun Jre	Version 6 update_7
Sun Jre	Version 6 update_8

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (58)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=758

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=123678756409861&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=126583436323697&w=2

Source: cve@mitre.org

http://osvdb.org/50515

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2008-1018.html

Source: cve@mitre.org

http://secunia.com/advisories/32991

Source: cve@mitre.org

http://secunia.com/advisories/33015

Source: cve@mitre.org

http://secunia.com/advisories/33187

Source: cve@mitre.org

http://secunia.com/advisories/33709

Source: cve@mitre.org

http://secunia.com/advisories/34233

Source: cve@mitre.org

http://secunia.com/advisories/34259

Source: cve@mitre.org

http://secunia.com/advisories/34447

Source: cve@mitre.org

http://secunia.com/advisories/34605

Source: cve@mitre.org

http://secunia.com/advisories/37386

Source: cve@mitre.org

http://secunia.com/advisories/38539

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200911-02.xml

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1

Source: cve@mitre.org

PatchVendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm

Source: cve@mitre.org

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0369.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/32608

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA08-340A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2008/3339

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/0672

Source: cve@mitre.org

http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/47049

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6319

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=758

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=123678756409861&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=126583436323697&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/50515

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2008-1018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32991

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33015

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33187

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33709

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34233

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34259

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34447

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34605

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37386

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/38539

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200911-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-0369.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/32608

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA08-340A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2008/3339

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/0672

Source: af854a3a-2127-422b-91ae-364da2661108

http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/47049

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6319

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.