CVE-2008-1186 — JDK vulnerability

6 documents5 sources

Severity

9.3CRITICALNVD

EPSS

18.0%

top 4.83%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SUN JDK SUN JRE SUN SDK

Timeline

PublishedMar 6

Latest updateMay 1

Description

Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.2_16 and earlier, allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1185, aka "the second issue."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDsun/jdk1.5.0

▶NVDsun/jre18 versions+17

▶NVDsun/sdk17 versions+16

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

GHSA

GHSA-vcxm-855r-p3hv: Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5↗2022-05-01

▶

CVEList

CVE-2008-1186: Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5↗2008-03-06

▶

📋Vendor Advisories

Red Hat

Untrusted applet and application privilege escalation (CVE-2008-1186)↗2008-03-06

▶

Red Hat

Untrusted applet and application privilege escalation (CVE-2008-1186)↗2008-03-06

▶

💬Community

Bugzilla

CVE-2008-1185 Untrusted applet and application privilege escalation (CVE-2008-1186)↗2008-03-04

▶