CVE-2008-1194 — JDK vulnerability

6 documents5 sources

Severity

4.3MEDIUMNVD

EPSS

27.5%

top 3.57%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SUN JDK SUN JRE

Timeline

PublishedMar 6

Latest updateMay 1

Description

Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to cause a denial of service (crash) via unknown vectors.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDsun/jdk1.5.0, 1.6.0+1

▶NVDsun/jre1.5.0, 1.6.0+1

Patches

Patch: sunsolve.sun.com ↗Patch: sunsolve.sun.com ↗

🔴Vulnerability Details

GHSA

GHSA-9778-59qc-w9g9: Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5↗2022-05-01

▶

CVEList

CVE-2008-1194: Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5↗2008-03-06

▶

📋Vendor Advisories

Red Hat

JRE image parsing library allows privilege escalation (CVE-2008-1194)↗2008-03-06

▶

Red Hat

JRE image parsing library allows privilege escalation (CVE-2008-1194)↗2008-03-06

▶

💬Community

Bugzilla

CVE-2008-1193 JRE image parsing library allows privilege escalation (CVE-2008-1194)↗2008-03-06

▶