Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-1188
HistoryMar 06, 2008 - 9:44 p.m.

CVE-2008-1188

2008-03-0621:44:00
CWE-119
[email protected]
web.nvd.nist.gov
36
cve-2008-1188
buffer overflow
java web start
sun jdk
jre
remote code execution
security vulnerability
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.9 High

AI Score

Confidence

High

0.546 Medium

EPSS

Percentile

97.7%

JSON

Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with (1) a long key name in the xml header or (2) a long charset value, different issues than CVE-2008-1189, aka “The first two issues.”

Affected configurations

NVD
Node
sunjdkMatch1.5.0-
OR
sunjdkMatch1.5.0update1
OR
sunjdkMatch1.5.0update10
OR
sunjdkMatch1.5.0update11
OR
sunjdkMatch1.5.0update12
OR
sunjdkMatch1.5.0update13
OR
sunjdkMatch1.5.0update14
OR
sunjdkMatch1.5.0update2
OR
sunjdkMatch1.5.0update3
OR
sunjdkMatch1.5.0update4
OR
sunjdkMatch1.5.0update5
OR
sunjdkMatch1.5.0update6
OR
sunjdkMatch1.5.0update7
OR
sunjdkMatch1.5.0update8
OR
sunjdkMatch1.5.0update9
OR
sunjdkMatch1.6.0-
OR
sunjdkMatch1.6.0update_3
OR
sunjdkMatch1.6.0update_4
Node
sunjreMatch1.5.0-
OR
sunjreMatch1.5.0update1
OR
sunjreMatch1.5.0update10
OR
sunjreMatch1.5.0update11
OR
sunjreMatch1.5.0update12
OR
sunjreMatch1.5.0update13
OR
sunjreMatch1.5.0update14
OR
sunjreMatch1.5.0update2
OR
sunjreMatch1.5.0update3
OR
sunjreMatch1.5.0update4
OR
sunjreMatch1.5.0update5
OR
sunjreMatch1.5.0update6
OR
sunjreMatch1.5.0update7
OR
sunjreMatch1.5.0update8
OR
sunjreMatch1.5.0update9
OR
sunjreMatch1.6.0-
OR
sunjreMatch1.6.0update_1
OR
sunjreMatch1.6.0update_2
OR
sunjreMatch1.6.0update_3
OR
sunjreMatch1.6.0update_4
CPENameOperatorVersion
sun:jdksun jdkeq1.5.0
sun:jdksun jdkeq1.6.0

References

Related

prion 2
nvd 2
cvelist 2
cve 1
ubuntucve 2
securityvulns 3
zdi 2
checkpoint_advisories 1
nessus 17
redhat 5
openvas 22
suse 2
f5 2
vmware 2
gentoo 1
prion
prion
Buffer overflow
2008-03-06 21:44:00
Buffer overflow
2008-03-06 21:44:00
nvd
nvd
CVE-2008-1188
2008-03-06 21:44:00
CVE-2008-1189
2008-03-06 21:44:00
cvelist
cvelist
CVE-2008-1189
2008-03-06 21:00:00
CVE-2008-1188
2008-03-06 21:00:00
cve
cve
CVE-2008-1189
2008-03-06 21:44:00
ubuntucve
ubuntucve
CVE-2008-1188
2008-03-06 00:00:00
CVE-2008-1189
2008-03-06 00:00:00
securityvulns
securityvulns
ZDI-08-009: Java Web Start tempbuff Stack Buffer Overflow
2008-03-13 00:00:00
Sun java WebStart multiple security vulnerabilities
2008-03-13 00:00:00
ZDI-08-010: Java Web Start encoding Stack Buffer Overflow
2008-03-13 00:00:00
zdi
zdi
Java Web Start encoding Stack Buffer Overflow Vulnerability
2008-03-12 00:00:00
Java Web Start tempbuff Stack Buffer Overflow Vulnerability
2008-03-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Sun Java Web Start Charset Encoding Stack Buffer Overflow (CVE-2008-1188)
2010-03-01 00:00:00
nessus
nessus
RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2008:0210)
2009-08-24 00:00:00
RHEL 5 : java-1.6.0-ibm (RHSA-2008:0267)
2013-01-24 00:00:00
SuSE 10 Security Update : Sun Java (ZYPP Patch Number 5131)
2008-04-04 00:00:00
redhat
redhat
(RHSA-2008:0210) Critical: java-1.5.0-ibm security update
2008-04-03 00:00:00
(RHSA-2008:0267) Critical: java-1.6.0-ibm security update
2008-05-19 00:00:00
(RHSA-2008:0186) Critical: java-1.5.0-sun security update
2008-03-06 00:00:00
openvas
openvas
SLES9: Security update for Java2
2009-10-10 00:00:00
SLES10: Security update for Sun Java
2009-10-13 00:00:00
SLES9: Security update for Java2
2009-10-10 00:00:00
suse
suse
remote code execution in Sun Java
2008-04-02 15:02:11
remote code execution in IBMJava2,IBMJava5,java-1_4_2-ibm,java-1_5_0-ibm
2008-04-25 14:46:33
f5
f5
SOL16475 - Multiple Sun Java vulnerabilities
2015-04-21 00:00:00
K16475 : Multiple Sun Java vulnerabilities
2015-04-21 00:00:00
vmware
vmware
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
2008-06-16 00:00:00
gentoo
gentoo
Sun JDK/JRE: Multiple vulnerabilities
2008-04-17 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.9 High

AI Score

Confidence

High

0.546 Medium

EPSS

Percentile

97.7%

JSON
Related for CVE-2008-1188
prion2nvd2cvelist2cve1ubuntucve2securityvulns3zdi2checkpoint_advisories1nessus17redhat5openvas22suse2f52vmware2gentoo1