cbcvebase.
CVE-2008-5357
published 2008-12-05

CVE-2008-5357: Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and…

PriorityP345critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
10.02%
95.1th percentile
Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which triggers a heap-based buffer overflow.

Affected

95 ranges· showing 25
VendorProductVersion rangeFixed in
sunjdk——
sunjdk——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——

CVSS provenance

nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_redhat9.3CRITICAL
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.