Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-1193

Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to gain privileges via an untrusted application.

Published

2008-03-06T21:44:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-264

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.5.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jdk	1.6.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.5.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes
Application	sun	jre	1.6.0	Yes

References

http://dev2dev.bea.com/pub/advisory/277 Third Party Advisory ([email protected])
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html Mailing List, Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html Mailing List, Third Party Advisory ([email protected])
http://secunia.com/advisories/29239 Third Party Advisory ([email protected])
http://secunia.com/advisories/29273 Third Party Advisory ([email protected])
http://secunia.com/advisories/29498 Third Party Advisory ([email protected])
http://secunia.com/advisories/29582 Third Party Advisory ([email protected])
http://secunia.com/advisories/29841 Third Party Advisory ([email protected])
http://secunia.com/advisories/29858 Third Party Advisory ([email protected])
http://secunia.com/advisories/29897 Third Party Advisory ([email protected])
http://secunia.com/advisories/30003 Third Party Advisory ([email protected])
http://secunia.com/advisories/30676 Third Party Advisory ([email protected])
http://secunia.com/advisories/30780 Third Party Advisory ([email protected])
http://secunia.com/advisories/31497 Third Party Advisory ([email protected])
http://secunia.com/advisories/32018 Third Party Advisory ([email protected])
http://security.gentoo.org/glsa/glsa-200804-28.xml Third Party Advisory ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-233325-1 Patch, Third Party Advisory ([email protected])
http://support.apple.com/kb/HT3178 Third Party Advisory ([email protected])
http://support.apple.com/kb/HT3179 Third Party Advisory ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml Third Party Advisory ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0186.html Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0210.html Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0244.html Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0245.html Third Party Advisory ([email protected])
http://www.redhat.com/support/errata/RHSA-2008-0267.html Third Party Advisory ([email protected])
http://www.securityfocus.com/bid/28125 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id?1019551 Third Party Advisory, VDB Entry ([email protected])
http://www.us-cert.gov/cas/techalerts/TA08-066A.html Third Party Advisory, US Government Resource ([email protected])
http://www.vmware.com/security/advisories/VMSA-2008-0010.html Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/0770/references Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/1252 Third Party Advisory ([email protected])
http://www.vupen.com/english/advisories/2008/1856/references Third Party Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/41028 Third Party Advisory, VDB Entry ([email protected])
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11409 Third Party Advisory ([email protected])
http://dev2dev.bea.com/pub/advisory/277 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29239 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29273 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29498 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29582 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29841 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29858 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/29897 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30003 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30676 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/30780 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/31497 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/32018 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://security.gentoo.org/glsa/glsa-200804-28.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-233325-1 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT3178 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT3179 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0186.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0210.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0244.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0245.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.redhat.com/support/errata/RHSA-2008-0267.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/28125 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1019551 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.us-cert.gov/cas/techalerts/TA08-066A.html Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.vmware.com/security/advisories/VMSA-2008-0010.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/0770/references Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1252 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2008/1856/references Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/41028 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11409 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)