cbcvebase.
CVE-2008-5357
published 2008-12-05

CVE-2008-5357: Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and…

critical9.3CVSS 3.1
AVNACMAuNCCICAC
Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which triggers a heap-based buffer overflow.

Affected

95 ranges· showing 25
VendorProductVersion rangeFixed in
sunjdk——
sunjdk——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——
sunjre——