CVE-2008-1190 — JDK vulnerability

CWE-2649 documents5 sources

Severity

9.3CRITICALNVD

EPSS

17.2%

top 4.97%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SUN JDK SUN JRE SUN SDK

Timeline

PublishedMar 6

Latest updateMay 1

Description

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application, a different issue than CVE-2008-1191, aka the "fourth" issue.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDsun/jdk1.5.0, 1.6.0+1

▶NVDsun/jre19 versions+18

▶NVDsun/sdk17 versions+16

🔴Vulnerability Details

GHSA

GHSA-m6g6-6pj7-xcc2: Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5↗2022-05-01

▶

CVEList

CVE-2008-1190: Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5↗2008-03-06

▶

📋Vendor Advisories

Red Hat

Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190)↗2008-03-06

▶

Red Hat

Untrusted Java Web Start arbitrary file creation↗2008-03-06

▶

Red Hat

Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190)↗2008-03-06

▶

Red Hat

Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190)↗2008-03-06

▶

💬Community

Bugzilla

CVE-2008-1191 Untrusted Java Web Start arbitrary file creation↗2008-04-30

▶

Bugzilla

CVE-2008-1188 Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190)↗2008-03-06

▶