csaf_redhat - rhsa-2009

rhsa-2009_0466

Vulnerability from csaf_redhat

Published

2009-05-07 11:45

Modified

2024-09-13 06:24

Summary

Red Hat Security Advisory: java-1.5.0-ibm security update

Notes

Topic

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server. This update has been rated as having low security impact by the Red Hat Security Response Team.

Details

This update corrects several security vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit, shipped as part of Red Hat Network Satellite Server. In a typical operating environment, these are of low security risk as the runtime is not used on untrusted applets. Several vulnerabilities were discovered in the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. These vulnerabilities are summarized on the IBM "Security alerts" page listed in the References section. (CVE-2008-3103, CVE-2008-5345, CVE-2008-5346, CVE-2008-5348, CVE-2008-5349, CVE-2008-5350, CVE-2008-5351, CVE-2008-5352, CVE-2008-5353, CVE-2008-5354, CVE-2008-5356, CVE-2008-5357, CVE-2008-5359, CVE-2008-5360) All users of java-1.5.0-ibm are advised to upgrade to these updated packages, containing the IBM 1.5.0 SR9 Java release. All running instances of IBM Java must be restarted for the update to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated java-1.5.0-ibm packages that fix several security issues are now\navailable for Red Hat Network Satellite Server.\n\nThis update has been rated as having low security impact by the Red Hat\nSecurity Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update corrects several security vulnerabilities in the IBM Java 2\nRuntime Environment and the IBM Java 2 Software Development Kit, shipped as\npart of Red Hat Network Satellite Server. In a typical operating\nenvironment, these are of low security risk as the runtime is not used on\nuntrusted applets.\n\nSeveral vulnerabilities were discovered in the IBM Java 2 Runtime\nEnvironment and the IBM Java 2 Software Development Kit. These\nvulnerabilities are summarized on the IBM \"Security alerts\" page listed in\nthe References section. (CVE-2008-3103, CVE-2008-5345, CVE-2008-5346,\nCVE-2008-5348, CVE-2008-5349, CVE-2008-5350, CVE-2008-5351, CVE-2008-5352,\nCVE-2008-5353, CVE-2008-5354, CVE-2008-5356, CVE-2008-5357, CVE-2008-5359,\nCVE-2008-5360)\n\nAll users of java-1.5.0-ibm are advised to upgrade to these updated\npackages, containing the IBM 1.5.0 SR9 Java release. All running instances\nof IBM Java must be restarted for the update to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2009:0466",
        "url": "https://access.redhat.com/errata/RHSA-2009:0466"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "http://www-128.ibm.com/developerworks/java/jdk/alerts/",
        "url": "http://www-128.ibm.com/developerworks/java/jdk/alerts/"
      },
      {
        "category": "external",
        "summary": "452659",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=452659"
      },
      {
        "category": "external",
        "summary": "472201",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472201"
      },
      {
        "category": "external",
        "summary": "472206",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472206"
      },
      {
        "category": "external",
        "summary": "472209",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472209"
      },
      {
        "category": "external",
        "summary": "472211",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472211"
      },
      {
        "category": "external",
        "summary": "472212",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472212"
      },
      {
        "category": "external",
        "summary": "472213",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472213"
      },
      {
        "category": "external",
        "summary": "472218",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472218"
      },
      {
        "category": "external",
        "summary": "472224",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472224"
      },
      {
        "category": "external",
        "summary": "472228",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472228"
      },
      {
        "category": "external",
        "summary": "472231",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472231"
      },
      {
        "category": "external",
        "summary": "472233",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472233"
      },
      {
        "category": "external",
        "summary": "474793",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474793"
      },
      {
        "category": "external",
        "summary": "474794",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474794"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://access.redhat.com/security/data/csaf/v2/advisories/2009/rhsa-2009_0466.json"
      }
    ],
    "title": "Red Hat Security Advisory: java-1.5.0-ibm security update",
    "tracking": {
      "current_release_date": "2024-09-13T06:24:31+00:00",
      "generator": {
        "date": "2024-09-13T06:24:31+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "3.33.3"
        }
      },
      "id": "RHSA-2009:0466",
      "initial_release_date": "2009-05-07T11:45:00+00:00",
      "revision_history": [
        {
          "date": "2009-05-07T11:45:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2009-05-07T07:45:26+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-09-13T06:24:31+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Satellite 5.2 (RHEL v.5)",
                "product": {
                  "name": "Red Hat Satellite 5.2 (RHEL v.5)",
                  "product_id": "5Server-Satellite",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_satellite:5.2::el5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Satellite 5.2 (RHEL v.4 AS)",
                "product": {
                  "name": "Red Hat Satellite 5.2 (RHEL v.4 AS)",
                  "product_id": "4AS-RHNSAT5.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:network_satellite:5.2::el4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Satellite"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
                "product": {
                  "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
                  "product_id": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm-devel@1.5.0.9-1jpp.2.el5?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
                "product": {
                  "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
                  "product_id": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm@1.5.0.9-1jpp.2.el5?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
                "product": {
                  "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
                  "product_id": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm-devel@1.5.0.9-1jpp.4.el4?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
                "product": {
                  "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
                  "product_id": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm@1.5.0.9-1jpp.4.el4?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64",
                "product": {
                  "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64",
                  "product_id": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm-devel@1.5.0.9-1jpp.2.el5?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
                "product": {
                  "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
                  "product_id": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm@1.5.0.9-1jpp.2.el5?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
                "product": {
                  "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
                  "product_id": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm-devel@1.5.0.9-1jpp.4.el4?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
                "product": {
                  "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
                  "product_id": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm@1.5.0.9-1jpp.4.el4?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
                "product": {
                  "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
                  "product_id": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm-devel@1.5.0.9-1jpp.2.el5?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
                "product": {
                  "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
                  "product_id": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm@1.5.0.9-1jpp.2.el5?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
                "product": {
                  "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
                  "product_id": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm-devel@1.5.0.9-1jpp.4.el4?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
                "product": {
                  "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
                  "product_id": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm@1.5.0.9-1jpp.4.el4?arch=i386\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
                "product": {
                  "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
                  "product_id": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm@1.5.0.9-1jpp.2.el5?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
                "product": {
                  "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
                  "product_id": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm@1.5.0.9-1jpp.4.el4?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
                "product": {
                  "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
                  "product_id": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm-devel@1.5.0.9-1jpp.4.el4?arch=s390\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
                "product": {
                  "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
                  "product_id": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/java-1.5.0-ibm@1.5.0.9-1jpp.4.el4?arch=s390\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386 as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386"
        },
        "product_reference": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
        "relates_to_product_reference": "4AS-RHNSAT5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390 as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390"
        },
        "product_reference": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
        "relates_to_product_reference": "4AS-RHNSAT5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x"
        },
        "product_reference": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
        "relates_to_product_reference": "4AS-RHNSAT5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src"
        },
        "product_reference": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
        "relates_to_product_reference": "4AS-RHNSAT5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64 as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64"
        },
        "product_reference": "java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
        "relates_to_product_reference": "4AS-RHNSAT5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386 as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386"
        },
        "product_reference": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
        "relates_to_product_reference": "4AS-RHNSAT5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390 as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390"
        },
        "product_reference": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
        "relates_to_product_reference": "4AS-RHNSAT5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x"
        },
        "product_reference": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
        "relates_to_product_reference": "4AS-RHNSAT5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64 as a component of Red Hat Satellite 5.2 (RHEL v.4 AS)",
          "product_id": "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64"
        },
        "product_reference": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
        "relates_to_product_reference": "4AS-RHNSAT5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386 as a component of Red Hat Satellite 5.2 (RHEL v.5)",
          "product_id": "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386"
        },
        "product_reference": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
        "relates_to_product_reference": "5Server-Satellite"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x as a component of Red Hat Satellite 5.2 (RHEL v.5)",
          "product_id": "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x"
        },
        "product_reference": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
        "relates_to_product_reference": "5Server-Satellite"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src as a component of Red Hat Satellite 5.2 (RHEL v.5)",
          "product_id": "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src"
        },
        "product_reference": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
        "relates_to_product_reference": "5Server-Satellite"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64 as a component of Red Hat Satellite 5.2 (RHEL v.5)",
          "product_id": "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64"
        },
        "product_reference": "java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
        "relates_to_product_reference": "5Server-Satellite"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386 as a component of Red Hat Satellite 5.2 (RHEL v.5)",
          "product_id": "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386"
        },
        "product_reference": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
        "relates_to_product_reference": "5Server-Satellite"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x as a component of Red Hat Satellite 5.2 (RHEL v.5)",
          "product_id": "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x"
        },
        "product_reference": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
        "relates_to_product_reference": "5Server-Satellite"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64 as a component of Red Hat Satellite 5.2 (RHEL v.5)",
          "product_id": "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        },
        "product_reference": "java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64",
        "relates_to_product_reference": "5Server-Satellite"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2008-3103",
      "discovery_date": "2008-06-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "452659"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to \"perform unauthorized operations\" via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK JMX allows illegal operations with local monitoring (6332953)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-3103"
        },
        {
          "category": "external",
          "summary": "RHBZ#452659",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=452659"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-3103",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-3103"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-3103",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-3103"
        }
      ],
      "release_date": "2008-07-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK JMX allows illegal operations with local monitoring (6332953)"
    },
    {
      "cve": "CVE-2008-5345",
      "discovery_date": "2008-12-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "474793"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make unauthorized connections to localhost via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JRE allows unauthorized file access and connections to localhost",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5345"
        },
        {
          "category": "external",
          "summary": "RHBZ#474793",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474793"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5345",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5345"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5345",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5345"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "JRE allows unauthorized file access and connections to localhost"
    },
    {
      "cve": "CVE-2008-5346",
      "discovery_date": "2008-12-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "474794"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "JRE allows unauthorized memory read access via a crafted ZIP file",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5346"
        },
        {
          "category": "external",
          "summary": "RHBZ#474794",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=474794"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5346",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5346"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5346",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5346"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "JRE allows unauthorized memory read access via a crafted ZIP file"
    },
    {
      "cve": "CVE-2008-5348",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472209"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS resource consumption) via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK Denial-Of-Service in kerberos authentication (6588160)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5348"
        },
        {
          "category": "external",
          "summary": "RHBZ#472209",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472209"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5348",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5348"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5348",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5348"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK Denial-Of-Service in kerberos authentication (6588160)"
    },
    {
      "cve": "CVE-2008-5349",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472206"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) via a crafted RSA public key.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK RSA public key length denial-of-service (6497740)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5349"
        },
        {
          "category": "external",
          "summary": "RHBZ#472206",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472206"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5349",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5349"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5349",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5349"
        }
      ],
      "release_date": "2008-12-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK RSA public key length denial-of-service (6497740)"
    },
    {
      "cve": "CVE-2008-5350",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472201"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and applets to list the contents of the operating user\u0027s directory via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK allows to list files within the user home directory (6484091)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5350"
        },
        {
          "category": "external",
          "summary": "RHBZ#472201",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472201"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5350",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5350"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5350",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5350"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK allows to list files within the user home directory (6484091)"
    },
    {
      "cve": "CVE-2008-5351",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472213"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the \"shortest\" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK UTF-8 decoder accepts non-shortest form sequences (4486841)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5351"
        },
        {
          "category": "external",
          "summary": "RHBZ#472213",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472213"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5351",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5351"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5351",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5351"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenJDK UTF-8 decoder accepts non-shortest form sequences (4486841)"
    },
    {
      "cve": "CVE-2008-5352",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK Jar200 Decompression buffer overflow (6755943)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5352"
        },
        {
          "category": "external",
          "summary": "RHBZ#472233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5352",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5352"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5352",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5352"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK Jar200 Decompression buffer overflow (6755943)"
    },
    {
      "cve": "CVE-2008-5353",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472224"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by \"deserializing Calendar objects\".",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK calendar object deserialization allows privilege escalation (6734167)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5353"
        },
        {
          "category": "external",
          "summary": "RHBZ#472224",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472224"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5353",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5353"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5353",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5353"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK calendar object deserialization allows privilege escalation (6734167)"
    },
    {
      "cve": "CVE-2008-5354",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472228"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with a long Main-Class manifest entry.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK Privilege escalation in command line applications (6733959)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5354"
        },
        {
          "category": "external",
          "summary": "RHBZ#472228",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472228"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5354",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5354"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5354",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5354"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "OpenJDK Privilege escalation in command line applications (6733959)"
    },
    {
      "cve": "CVE-2008-5356",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472218"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK Font processing vulnerability (6733336)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5356"
        },
        {
          "category": "external",
          "summary": "RHBZ#472218",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472218"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5356",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5356"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5356",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5356"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK Font processing vulnerability (6733336)"
    },
    {
      "cve": "CVE-2008-5357",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472231"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which triggers a heap-based buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK Truetype Font processing vulnerability (6751322)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5357"
        },
        {
          "category": "external",
          "summary": "RHBZ#472231",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472231"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5357",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5357"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5357",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5357"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK Truetype Font processing vulnerability (6751322)"
    },
    {
      "cve": "CVE-2008-5359",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472212"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the Java AWT library.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK Buffer overflow in image processing (6726779)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5359"
        },
        {
          "category": "external",
          "summary": "RHBZ#472212",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472212"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5359",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5359"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5359",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5359"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "OpenJDK Buffer overflow in image processing (6726779)"
    },
    {
      "cve": "CVE-2008-5360",
      "discovery_date": "2008-11-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "472211"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenJDK temporary files have guessable file names (6721753)",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
          "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
          "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
          "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5360"
        },
        {
          "category": "external",
          "summary": "RHBZ#472211",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=472211"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5360",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5360"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5360",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5360"
        }
      ],
      "release_date": "2008-12-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.src",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-1:1.5.0.9-1jpp.4.el4.x86_64",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.i386",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.s390x",
            "4AS-RHNSAT5.2:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.4.el4.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.src",
            "5Server-Satellite:java-1.5.0-ibm-1:1.5.0.9-1jpp.2.el5.x86_64",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.i386",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.s390x",
            "5Server-Satellite:java-1.5.0-ibm-devel-1:1.5.0.9-1jpp.2.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:0466"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "OpenJDK temporary files have guessable file names (6721753)"
    }
  ]
}

cve-2008-5350

Vulnerability from cvelistv5

Published

2008-12-05 11:00

Modified

2024-08-07 10:49

Severity

Summary

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and applets to list the contents of the operating user's directory via unknown vectors.

References

URL	Tags
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/34259	third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/0672	vdb-entry, x_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisory, x_refsource_REDHAT
http://sunsolve.sun.com/search/document.do?assetkey=1-26-246266-1	vendor-advisory, x_refsource_SUNALERT
http://secunia.com/advisories/33015	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm	x_refsource_CONFIRM
http://secunia.com/advisories/34889	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34233	third-party-advisory, x_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://secunia.com/advisories/38539	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33528	third-party-advisory, x_refsource_SECUNIA
http://osvdb.org/50503	vdb-entry, x_refsource_OSVDB
http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://www.vupen.com/english/advisories/2008/3339	vdb-entry, x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://www.securitytracker.com/id?1021310	vdb-entry, x_refsource_SECTRACK
http://www.redhat.com/support/errata/RHSA-2009-0445.html	vendor-advisory, x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2009-0016.html	vendor-advisory, x_refsource_REDHAT
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6424	vdb-entry, signature, x_refsource_OVAL
http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisory, x_refsource_CERT
http://secunia.com/advisories/33709	third-party-advisory, x_refsource_SECUNIA
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=	x_refsource_CONFIRM
http://secunia.com/advisories/34605	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2009-0015.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/32991	third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/32608	vdb-entry, x_refsource_BID
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33710	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.689Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "246266",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246266-1"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "50503",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50503"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "1021310",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021310"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6424",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6424"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and applets to list the contents of the operating user\u0027s directory via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "246266",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246266-1"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "50503",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50503"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "1021310",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021310"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6424",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6424"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5350",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applications and applets to list the contents of the operating user\u0027s directory via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "246266",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246266-1"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "50503",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50503"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "1021310",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021310"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6424",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6424"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5350",
    "datePublished": "2008-12-05T11:00:00",
    "dateReserved": "2008-12-04T00:00:00",
    "dateUpdated": "2024-08-07T10:49:12.689Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5346

Vulnerability from cvelistv5

Published

2008-12-05 11:00

Modified

2024-08-07 10:49

Severity

Summary

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.

References

URL	Tags
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/33015	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm	x_refsource_CONFIRM
http://secunia.com/advisories/34889	third-party-advisory, x_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
http://www.securitytracker.com/id?1021306	vdb-entry, x_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisory, x_refsource_REDHAT
http://www.vupen.com/english/advisories/2008/3339	vdb-entry, x_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2009-0445.html	vendor-advisory, x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2009-0016.html	vendor-advisory, x_refsource_REDHAT
http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisory, x_refsource_CERT
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=	x_refsource_CONFIRM
http://secunia.com/advisories/34605	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6629	vdb-entry, signature, x_refsource_OVAL
http://secunia.com/advisories/32991	third-party-advisory, x_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-26-246386-1	vendor-advisory, x_refsource_SUNALERT
http://osvdb.org/50507	vdb-entry, x_refsource_OSVDB
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33710	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.392Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "1021306",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021306"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6629",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6629"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "246386",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246386-1"
          },
          {
            "name": "50507",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50507"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "1021306",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021306"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6629",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6629"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "246386",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246386-1"
        },
        {
          "name": "50507",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50507"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5346",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "1021306",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021306"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6629",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6629"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "246386",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246386-1"
            },
            {
              "name": "50507",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50507"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5346",
    "datePublished": "2008-12-05T11:00:00",
    "dateReserved": "2008-12-04T00:00:00",
    "dateUpdated": "2024-08-07T10:49:12.392Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5354

Vulnerability from cvelistv5

Published

2008-12-05 11:00

Modified

2024-08-07 10:49

Severity

Summary

Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with a long Main-Class manifest entry.

References

URL	Tags
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/34259	third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/0672	vdb-entry, x_refsource_VUPEN
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6537	vdb-entry, signature, x_refsource_OVAL
http://www.ximido.de/research/advisories/SM_Java-BO_200811.txt	x_refsource_MISC
http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/33015	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm	x_refsource_CONFIRM
http://secunia.com/advisories/34889	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34233	third-party-advisory, x_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://secunia.com/advisories/38539	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33528	third-party-advisory, x_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-26-244990-1	vendor-advisory, x_refsource_SUNALERT
http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://www.vupen.com/english/advisories/2008/3339	vdb-entry, x_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/47060	vdb-entry, x_refsource_XF
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2009-0445.html	vendor-advisory, x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2009-0016.html	vendor-advisory, x_refsource_REDHAT
http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisory, x_refsource_CERT
http://secunia.com/advisories/33709	third-party-advisory, x_refsource_SECUNIA
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=	x_refsource_CONFIRM
http://secunia.com/advisories/34605	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2009-0015.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/32991	third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/32608	vdb-entry, x_refsource_BID
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33710	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.655Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "oval:org.mitre.oval:def:6537",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6537"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.ximido.de/research/advisories/SM_Java-BO_200811.txt"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "244990",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244990-1"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "jre-commandline-privilege-escalation(47060)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47060"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with a long Main-Class manifest entry."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "oval:org.mitre.oval:def:6537",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6537"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.ximido.de/research/advisories/SM_Java-BO_200811.txt"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "244990",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244990-1"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "jre-commandline-privilege-escalation(47060)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47060"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5354",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with a long Main-Class manifest entry."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "oval:org.mitre.oval:def:6537",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6537"
            },
            {
              "name": "http://www.ximido.de/research/advisories/SM_Java-BO_200811.txt",
              "refsource": "MISC",
              "url": "http://www.ximido.de/research/advisories/SM_Java-BO_200811.txt"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "244990",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244990-1"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "jre-commandline-privilege-escalation(47060)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47060"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5354",
    "datePublished": "2008-12-05T11:00:00",
    "dateReserved": "2008-12-04T00:00:00",
    "dateUpdated": "2024-08-07T10:49:12.655Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5348

Vulnerability from cvelistv5

Published

2008-12-05 11:00

Modified

2024-08-07 10:49

Severity

Summary

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS resource consumption) via unknown vectors.

References

URL	Tags
http://sunsolve.sun.com/search/document.do?assetkey=1-26-246346-1	vendor-advisory, x_refsource_SUNALERT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/34259	third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/0672	vdb-entry, x_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/33015	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm	x_refsource_CONFIRM
http://secunia.com/advisories/34889	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34233	third-party-advisory, x_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html	vendor-advisory, x_refsource_SUSE
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019797.1-1	vendor-advisory, x_refsource_SUNALERT
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://secunia.com/advisories/38539	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33528	third-party-advisory, x_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6549	vdb-entry, signature, x_refsource_OVAL
http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2009-0445.html	vendor-advisory, x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2009-0016.html	vendor-advisory, x_refsource_REDHAT
http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisory, x_refsource_CERT
http://secunia.com/advisories/33709	third-party-advisory, x_refsource_SECUNIA
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=	x_refsource_CONFIRM
http://secunia.com/advisories/34605	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2009-0015.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/32991	third-party-advisory, x_refsource_SECUNIA
http://osvdb.org/50505	vdb-entry, x_refsource_OSVDB
http://www.securityfocus.com/bid/32608	vdb-entry, x_refsource_BID
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33710	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.294Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "246346",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246346-1"
          },
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "1019797",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019797.1-1"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "oval:org.mitre.oval:def:6549",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6549"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "50505",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50505"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS resource consumption) via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "246346",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246346-1"
        },
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "1019797",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019797.1-1"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "oval:org.mitre.oval:def:6549",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6549"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "50505",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50505"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5348",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS resource consumption) via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "246346",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246346-1"
            },
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "1019797",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019797.1-1"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "oval:org.mitre.oval:def:6549",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6549"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "50505",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50505"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5348",
    "datePublished": "2008-12-05T11:00:00",
    "dateReserved": "2008-12-04T00:00:00",
    "dateUpdated": "2024-08-07T10:49:12.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5345

Vulnerability from cvelistv5

Published

2008-12-05 11:00

Modified

2024-08-07 10:49

Severity

Summary

Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make unauthorized connections to localhost via unknown vectors.

References

URL	Tags
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html	vendor-advisory, x_refsource_SUSE
http://osvdb.org/50508	vdb-entry, x_refsource_OSVDB
http://www.vupen.com/english/advisories/2009/0672	vdb-entry, x_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/33015	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm	x_refsource_CONFIRM
http://secunia.com/advisories/34889	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34233	third-party-advisory, x_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://secunia.com/advisories/38539	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33528	third-party-advisory, x_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6059	vdb-entry, signature, x_refsource_OVAL
http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://www.vupen.com/english/advisories/2008/3339	vdb-entry, x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2009-0445.html	vendor-advisory, x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2009-0016.html	vendor-advisory, x_refsource_REDHAT
http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisory, x_refsource_CERT
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=	x_refsource_CONFIRM
http://secunia.com/advisories/34605	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2009-0015.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/32991	third-party-advisory, x_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-26-246387-1	vendor-advisory, x_refsource_SUNALERT
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33710	third-party-advisory, x_refsource_SECUNIA
http://www.securitytracker.com/id?1021305	vdb-entry, x_refsource_SECTRACK

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.304Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "50508",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50508"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "oval:org.mitre.oval:def:6059",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6059"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "246387",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246387-1"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          },
          {
            "name": "1021305",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021305"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make unauthorized connections to localhost via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "50508",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50508"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "oval:org.mitre.oval:def:6059",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6059"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "246387",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246387-1"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        },
        {
          "name": "1021305",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021305"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5345",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read arbitrary files and make unauthorized connections to localhost via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "50508",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50508"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "oval:org.mitre.oval:def:6059",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6059"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "246387",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246387-1"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            },
            {
              "name": "1021305",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021305"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5345",
    "datePublished": "2008-12-05T11:00:00",
    "dateReserved": "2008-12-04T00:00:00",
    "dateUpdated": "2024-08-07T10:49:12.304Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5352

Vulnerability from cvelistv5

Published

2008-12-05 11:00

Modified

2024-08-07 10:49

Severity

Summary

Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow.

References

URL	Tags
http://secunia.com/advisories/34259	third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/33015	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm	x_refsource_CONFIRM
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/33528	third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisory, x_refsource_REDHAT
http://sunsolve.sun.com/search/document.do?assetkey=1-26-244992-1	vendor-advisory, x_refsource_SUNALERT
http://www.vupen.com/english/advisories/2008/3339	vdb-entry, x_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2009-0016.html	vendor-advisory, x_refsource_REDHAT
http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisory, x_refsource_CERT
http://secunia.com/advisories/33709	third-party-advisory, x_refsource_SECUNIA
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2009-0015.html	vendor-advisory, x_refsource_REDHAT
http://osvdb.org/50501	vdb-entry, x_refsource_OSVDB
http://secunia.com/advisories/32991	third-party-advisory, x_refsource_SECUNIA
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=759	third-party-advisory, x_refsource_IDEFENSE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6383	vdb-entry, signature, x_refsource_OVAL
http://www.securityfocus.com/bid/32608	vdb-entry, x_refsource_BID
http://www.securitytracker.com/id?1021312	vdb-entry, x_refsource_SECTRACK
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33710	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.368Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "244992",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244992-1"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "50501",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50501"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "20081204 Sun Java JRE Pack200 Decompression Integer Overflow Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=759"
          },
          {
            "name": "oval:org.mitre.oval:def:6383",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6383"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "1021312",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021312"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-04T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "244992",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244992-1"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "50501",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50501"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "20081204 Sun Java JRE Pack200 Decompression Integer Overflow Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=759"
        },
        {
          "name": "oval:org.mitre.oval:def:6383",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6383"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "1021312",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021312"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5352",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "244992",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244992-1"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "50501",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50501"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "20081204 Sun Java JRE Pack200 Decompression Integer Overflow Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=759"
            },
            {
              "name": "oval:org.mitre.oval:def:6383",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6383"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "1021312",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021312"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5352",
    "datePublished": "2008-12-05T11:00:00",
    "dateReserved": "2008-12-04T00:00:00",
    "dateUpdated": "2024-08-07T10:49:12.368Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5351

Vulnerability from cvelistv5

Published

2008-12-05 11:00

Modified

2024-08-07 10:49

Severity

Summary

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings.

References

URL	Tags
http://osvdb.org/50502	vdb-entry, x_refsource_OSVDB
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/34259	third-party-advisory, x_refsource_SECUNIA
http://sunsolve.sun.com/search/document.do?assetkey=1-26-245246-1	vendor-advisory, x_refsource_SUNALERT
http://www.vupen.com/english/advisories/2009/0672	vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/34447	third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/33015	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm	x_refsource_CONFIRM
http://secunia.com/advisories/34889	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34233	third-party-advisory, x_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2009-0369.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://secunia.com/advisories/38539	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
http://www.securitytracker.com/id?1021311	vdb-entry, x_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://www.vupen.com/english/advisories/2008/3339	vdb-entry, x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2009-0445.html	vendor-advisory, x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2009-0016.html	vendor-advisory, x_refsource_REDHAT
http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisory, x_refsource_CERT
http://secunia.com/advisories/33709	third-party-advisory, x_refsource_SECUNIA
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=	x_refsource_CONFIRM
http://secunia.com/advisories/34605	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/32991	third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/32608	vdb-entry, x_refsource_BID
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33710	third-party-advisory, x_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6212	vdb-entry, signature, x_refsource_OVAL

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.371Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "50502",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50502"
          },
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "245246",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-245246-1"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "34447",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34447"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "RHSA-2009:0369",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "1021311",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021311"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          },
          {
            "name": "oval:org.mitre.oval:def:6212",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6212"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the \"shortest\" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "50502",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50502"
        },
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "245246",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-245246-1"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "34447",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34447"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "RHSA-2009:0369",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "1021311",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021311"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        },
        {
          "name": "oval:org.mitre.oval:def:6212",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6212"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5351",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the \"shortest\" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "50502",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50502"
            },
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "245246",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-245246-1"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "34447",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34447"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "RHSA-2009:0369",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "1021311",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021311"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            },
            {
              "name": "oval:org.mitre.oval:def:6212",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6212"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5351",
    "datePublished": "2008-12-05T11:00:00",
    "dateReserved": "2008-12-04T00:00:00",
    "dateUpdated": "2024-08-07T10:49:12.371Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5349

Vulnerability from cvelistv5

Published

2008-12-05 11:00

Modified

2024-08-07 10:49

Severity

Summary

Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) via a crafted RSA public key.

References

URL	Tags
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133	vendor-advisory, x_refsource_HP
http://secunia.com/advisories/34259	third-party-advisory, x_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/47064	vdb-entry, x_refsource_XF
http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/33015	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm	x_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2008-491.htm	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/504010/100/0/threaded	vendor-advisory, x_refsource_HP
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf	x_refsource_CONFIRM
http://secunia.com/advisories/35255	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html	vendor-advisory, x_refsource_SUSE
http://www.vupen.com/english/advisories/2009/1426	vdb-entry, x_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisory, x_refsource_REDHAT
http://www.vupen.com/english/advisories/2008/3339	vdb-entry, x_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2009-0016.html	vendor-advisory, x_refsource_REDHAT
http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisory, x_refsource_CERT
http://secunia.com/advisories/33709	third-party-advisory, x_refsource_SECUNIA
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133	vendor-advisory, x_refsource_HP
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=	x_refsource_CONFIRM
http://osvdb.org/50504	vdb-entry, x_refsource_OSVDB
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5843	vdb-entry, signature, x_refsource_OVAL
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html	vendor-advisory, x_refsource_SUSE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-246286-1	vendor-advisory, x_refsource_SUNALERT
http://secunia.com/advisories/32991	third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/32608	vdb-entry, x_refsource_BID
http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://www.securitytracker.com/id?1021309	vdb-entry, x_refsource_SECTRACK

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.357Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090058",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01745133"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "sun-jre-rsa-dos(47064)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47064"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-491.htm"
          },
          {
            "name": "HPSBUX02429",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/504010/100/0/threaded"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "35255",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35255"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "ADV-2009-1426",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1426"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "name": "HPSBMA02429",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01745133"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "50504",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50504"
          },
          {
            "name": "oval:org.mitre.oval:def:5843",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5843"
          },
          {
            "name": "SUSE-SR:2009:016",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html"
          },
          {
            "name": "246286",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246286-1"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "SUSE-SR:2009:017",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "1021309",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021309"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) via a crafted RSA public key."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090058",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01745133"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "sun-jre-rsa-dos(47064)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47064"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-491.htm"
        },
        {
          "name": "HPSBUX02429",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://www.securityfocus.com/archive/1/504010/100/0/threaded"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "35255",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35255"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "ADV-2009-1426",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1426"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "name": "HPSBMA02429",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01745133"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "50504",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50504"
        },
        {
          "name": "oval:org.mitre.oval:def:5843",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5843"
        },
        {
          "name": "SUSE-SR:2009:016",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html"
        },
        {
          "name": "246286",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246286-1"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "SUSE-SR:2009:017",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "1021309",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021309"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5349",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) via a crafted RSA public key."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090058",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01745133"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "sun-jre-rsa-dos(47064)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47064"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-491.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-491.htm"
            },
            {
              "name": "HPSBUX02429",
              "refsource": "HP",
              "url": "http://www.securityfocus.com/archive/1/504010/100/0/threaded"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "35255",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35255"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "ADV-2009-1426",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1426"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "HPSBMA02429",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01745133"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "50504",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50504"
            },
            {
              "name": "oval:org.mitre.oval:def:5843",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5843"
            },
            {
              "name": "SUSE-SR:2009:016",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html"
            },
            {
              "name": "246286",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-246286-1"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "SUSE-SR:2009:017",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "1021309",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021309"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5349",
    "datePublished": "2008-12-05T11:00:00",
    "dateReserved": "2008-12-04T00:00:00",
    "dateUpdated": "2024-08-07T10:49:12.357Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5353

Vulnerability from cvelistv5

Published

2008-12-05 11:00

Modified

2024-08-07 10:49

Severity

Summary

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".

References

URL	Tags
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/34259	third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/0672	vdb-entry, x_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/33015	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm	x_refsource_CONFIRM
http://secunia.com/advisories/34889	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34233	third-party-advisory, x_refsource_SECUNIA
http://www.securitytracker.com/id?1021313	vdb-entry, x_refsource_SECTRACK
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf	x_refsource_CONFIRM
http://blog.cr0.org/2009/05/write-once-own-everyone.html	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://secunia.com/advisories/38539	third-party-advisory, x_refsource_SECUNIA
http://landonf.bikemonkey.org/code/macosx/CVE-2008-5353.20090519.html	x_refsource_MISC
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33528	third-party-advisory, x_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6511	vdb-entry, signature, x_refsource_OVAL
http://www.securityfocus.com/archive/1/503797/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://www.vupen.com/english/advisories/2008/3339	vdb-entry, x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2009-0445.html	vendor-advisory, x_refsource_REDHAT
http://sunsolve.sun.com/search/document.do?assetkey=1-26-244991-1	vendor-advisory, x_refsource_SUNALERT
http://www.redhat.com/support/errata/RHSA-2009-0016.html	vendor-advisory, x_refsource_REDHAT
http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisory, x_refsource_CERT
http://secunia.com/advisories/33709	third-party-advisory, x_refsource_SECUNIA
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=	x_refsource_CONFIRM
http://secunia.com/advisories/34605	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2009-0015.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/35118	third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/1391	vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/32991	third-party-advisory, x_refsource_SECUNIA
http://osvdb.org/50500	vdb-entry, x_refsource_OSVDB
http://www.securityfocus.com/bid/32608	vdb-entry, x_refsource_BID
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33710	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.329Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "1021313",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021313"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://blog.cr0.org/2009/05/write-once-own-everyone.html"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://landonf.bikemonkey.org/code/macosx/CVE-2008-5353.20090519.html"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "oval:org.mitre.oval:def:6511",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6511"
          },
          {
            "name": "20090524 Hardening OSX against CVE-2008-5353",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/503797/100/0/threaded"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "244991",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244991-1"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "35118",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35118"
          },
          {
            "name": "ADV-2009-1391",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/1391"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "50500",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50500"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by \"deserializing Calendar objects\"."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "1021313",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021313"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://blog.cr0.org/2009/05/write-once-own-everyone.html"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://landonf.bikemonkey.org/code/macosx/CVE-2008-5353.20090519.html"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "oval:org.mitre.oval:def:6511",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6511"
        },
        {
          "name": "20090524 Hardening OSX against CVE-2008-5353",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/503797/100/0/threaded"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "244991",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244991-1"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "35118",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35118"
        },
        {
          "name": "ADV-2009-1391",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/1391"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "50500",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50500"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5353",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by \"deserializing Calendar objects\"."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "1021313",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021313"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "http://blog.cr0.org/2009/05/write-once-own-everyone.html",
              "refsource": "MISC",
              "url": "http://blog.cr0.org/2009/05/write-once-own-everyone.html"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "http://landonf.bikemonkey.org/code/macosx/CVE-2008-5353.20090519.html",
              "refsource": "MISC",
              "url": "http://landonf.bikemonkey.org/code/macosx/CVE-2008-5353.20090519.html"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "oval:org.mitre.oval:def:6511",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6511"
            },
            {
              "name": "20090524 Hardening OSX against CVE-2008-5353",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/503797/100/0/threaded"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "244991",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244991-1"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "35118",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35118"
            },
            {
              "name": "ADV-2009-1391",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/1391"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "50500",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50500"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5353",
    "datePublished": "2008-12-05T11:00:00",
    "dateReserved": "2008-12-04T00:00:00",
    "dateUpdated": "2024-08-07T10:49:12.329Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5357

Vulnerability from cvelistv5

Published

2008-12-05 11:00

Modified

2024-08-07 10:49

Severity

Summary

Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which triggers a heap-based buffer overflow.

References

URL	Tags
http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1	vendor-advisory, x_refsource_SUNALERT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://osvdb.org/50517	vdb-entry, x_refsource_OSVDB
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/34259	third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/0672	vdb-entry, x_refsource_VUPEN
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=760	third-party-advisory, x_refsource_IDEFENSE
http://secunia.com/advisories/34447	third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/33015	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm	x_refsource_CONFIRM
http://secunia.com/advisories/34233	third-party-advisory, x_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2009-0369.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://secunia.com/advisories/38539	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://www.vupen.com/english/advisories/2008/3339	vdb-entry, x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2009-0016.html	vendor-advisory, x_refsource_REDHAT
http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisory, x_refsource_CERT
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6505	vdb-entry, signature, x_refsource_OVAL
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=	x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/47050	vdb-entry, x_refsource_XF
http://secunia.com/advisories/34605	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/33187	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/32991	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm	x_refsource_CONFIRM
http://www.securityfocus.com/bid/32608	vdb-entry, x_refsource_BID
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33710	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.352Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "244987",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
          },
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "50517",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50517"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "20081204 Sun Java JRE TrueType Font Parsing Integer Overflow Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=760"
          },
          {
            "name": "34447",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34447"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "RHSA-2009:0369",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6505",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6505"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "jre-font-privilege-escalation(47050)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47050"
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "33187",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33187"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which triggers a heap-based buffer overflow."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "244987",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
        },
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "50517",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50517"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "20081204 Sun Java JRE TrueType Font Parsing Integer Overflow Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=760"
        },
        {
          "name": "34447",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34447"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "RHSA-2009:0369",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6505",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6505"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "jre-font-privilege-escalation(47050)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47050"
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "33187",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33187"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5357",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file, which triggers a heap-based buffer overflow."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "244987",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
            },
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "50517",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50517"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "20081204 Sun Java JRE TrueType Font Parsing Integer Overflow Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=760"
            },
            {
              "name": "34447",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34447"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "RHSA-2009:0369",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6505",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6505"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "jre-font-privilege-escalation(47050)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47050"
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "33187",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33187"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5357",
    "datePublished": "2008-12-05T11:00:00",
    "dateReserved": "2008-12-04T00:00:00",
    "dateUpdated": "2024-08-07T10:49:12.352Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-3103

Vulnerability from cvelistv5

Published

2008-07-09 23:00

Modified

2024-08-07 09:28

Severity

Summary

Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to "perform unauthorized operations" via unspecified vectors.

References

URL	Tags
http://www.securitytracker.com/id?1020458	vdb-entry, x_refsource_SECTRACK
http://www.redhat.com/support/errata/RHSA-2008-1044.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/32394	third-party-advisory, x_refsource_SECUNIA
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html	vendor-advisory, x_refsource_APPLE
http://marc.info/?l=bugtraq&m=122331139823057&w=2	mailing-list, x_refsource_BUGTRAQ
http://secunia.com/advisories/32436	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm	x_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm	x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/43669	vdb-entry, x_refsource_XF
http://secunia.com/advisories/31600	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/32018	third-party-advisory, x_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://secunia.com/advisories/32179	third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/2740	vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/33237	third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/2056/references	vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/31055	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/32180	third-party-advisory, x_refsource_SECUNIA
http://www.vmware.com/security/advisories/VMSA-2008-0016.html	x_refsource_CONFIRM
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://sunsolve.sun.com/search/document.do?assetkey=1-66-238965-1	vendor-advisory, x_refsource_SUNALERT
http://support.apple.com/kb/HT3178	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2008-0594.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/32437	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/31497	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2008-0891.html	vendor-advisory, x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2008-1045.html	vendor-advisory, x_refsource_REDHAT
http://www.securityfocus.com/bid/30146	vdb-entry, x_refsource_BID
http://secunia.com/advisories/33238	third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/archive/1/497041/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
http://www.redhat.com/support/errata/RHSA-2008-0906.html	vendor-advisory, x_refsource_REDHAT
http://www.us-cert.gov/cas/techalerts/TA08-193A.html	third-party-advisory, x_refsource_CERT
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://support.apple.com/kb/HT3179	x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10920	vdb-entry, signature, x_refsource_OVAL
http://www.redhat.com/support/errata/RHSA-2008-0595.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/31010	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:28:41.545Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1020458",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1020458"
          },
          {
            "name": "RHSA-2008:1044",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-1044.html"
          },
          {
            "name": "32394",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32394"
          },
          {
            "name": "APPLE-SA-2008-09-24",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html"
          },
          {
            "name": "20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=122331139823057\u0026w=2"
          },
          {
            "name": "32436",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32436"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm"
          },
          {
            "name": "sun-jmx-security-bypass(43669)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43669"
          },
          {
            "name": "31600",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31600"
          },
          {
            "name": "SUSE-SA:2008:042",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html"
          },
          {
            "name": "32018",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32018"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "name": "32179",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32179"
          },
          {
            "name": "ADV-2008-2740",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2740"
          },
          {
            "name": "33237",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33237"
          },
          {
            "name": "ADV-2008-2056",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2056/references"
          },
          {
            "name": "31055",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31055"
          },
          {
            "name": "32180",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32180"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2008-0016.html"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "238965",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-238965-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3178"
          },
          {
            "name": "RHSA-2008:0594",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0594.html"
          },
          {
            "name": "32437",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32437"
          },
          {
            "name": "SUSE-SR:2008:022",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html"
          },
          {
            "name": "31497",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31497"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm"
          },
          {
            "name": "RHSA-2008:0891",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0891.html"
          },
          {
            "name": "RHSA-2008:1045",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-1045.html"
          },
          {
            "name": "30146",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/30146"
          },
          {
            "name": "33238",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33238"
          },
          {
            "name": "20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/497041/100/0/threaded"
          },
          {
            "name": "RHSA-2008:0906",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0906.html"
          },
          {
            "name": "TA08-193A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-193A.html"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3179"
          },
          {
            "name": "oval:org.mitre.oval:def:10920",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10920"
          },
          {
            "name": "RHSA-2008:0595",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0595.html"
          },
          {
            "name": "31010",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31010"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-07-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to \"perform unauthorized operations\" via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1020458",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1020458"
        },
        {
          "name": "RHSA-2008:1044",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-1044.html"
        },
        {
          "name": "32394",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32394"
        },
        {
          "name": "APPLE-SA-2008-09-24",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html"
        },
        {
          "name": "20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=122331139823057\u0026w=2"
        },
        {
          "name": "32436",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32436"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm"
        },
        {
          "name": "sun-jmx-security-bypass(43669)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43669"
        },
        {
          "name": "31600",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31600"
        },
        {
          "name": "SUSE-SA:2008:042",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html"
        },
        {
          "name": "32018",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32018"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "name": "32179",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32179"
        },
        {
          "name": "ADV-2008-2740",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2740"
        },
        {
          "name": "33237",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33237"
        },
        {
          "name": "ADV-2008-2056",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2056/references"
        },
        {
          "name": "31055",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31055"
        },
        {
          "name": "32180",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32180"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2008-0016.html"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "238965",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-238965-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3178"
        },
        {
          "name": "RHSA-2008:0594",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0594.html"
        },
        {
          "name": "32437",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32437"
        },
        {
          "name": "SUSE-SR:2008:022",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html"
        },
        {
          "name": "31497",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31497"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm"
        },
        {
          "name": "RHSA-2008:0891",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0891.html"
        },
        {
          "name": "RHSA-2008:1045",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-1045.html"
        },
        {
          "name": "30146",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/30146"
        },
        {
          "name": "33238",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33238"
        },
        {
          "name": "20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/497041/100/0/threaded"
        },
        {
          "name": "RHSA-2008:0906",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0906.html"
        },
        {
          "name": "TA08-193A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-193A.html"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3179"
        },
        {
          "name": "oval:org.mitre.oval:def:10920",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10920"
        },
        {
          "name": "RHSA-2008:0595",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0595.html"
        },
        {
          "name": "31010",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31010"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-3103",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier, when local monitoring is enabled, allows remote attackers to \"perform unauthorized operations\" via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1020458",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1020458"
            },
            {
              "name": "RHSA-2008:1044",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-1044.html"
            },
            {
              "name": "32394",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32394"
            },
            {
              "name": "APPLE-SA-2008-09-24",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html"
            },
            {
              "name": "20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=122331139823057\u0026w=2"
            },
            {
              "name": "32436",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32436"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm"
            },
            {
              "name": "sun-jmx-security-bypass(43669)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43669"
            },
            {
              "name": "31600",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31600"
            },
            {
              "name": "SUSE-SA:2008:042",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html"
            },
            {
              "name": "32018",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32018"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "32179",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32179"
            },
            {
              "name": "ADV-2008-2740",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2740"
            },
            {
              "name": "33237",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33237"
            },
            {
              "name": "ADV-2008-2056",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2056/references"
            },
            {
              "name": "31055",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31055"
            },
            {
              "name": "32180",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32180"
            },
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2008-0016.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2008-0016.html"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "238965",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-238965-1"
            },
            {
              "name": "http://support.apple.com/kb/HT3178",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3178"
            },
            {
              "name": "RHSA-2008:0594",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0594.html"
            },
            {
              "name": "32437",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32437"
            },
            {
              "name": "SUSE-SR:2008:022",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00009.html"
            },
            {
              "name": "31497",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31497"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm"
            },
            {
              "name": "RHSA-2008:0891",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0891.html"
            },
            {
              "name": "RHSA-2008:1045",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-1045.html"
            },
            {
              "name": "30146",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/30146"
            },
            {
              "name": "33238",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33238"
            },
            {
              "name": "20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/497041/100/0/threaded"
            },
            {
              "name": "RHSA-2008:0906",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0906.html"
            },
            {
              "name": "TA08-193A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-193A.html"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "http://support.apple.com/kb/HT3179",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3179"
            },
            {
              "name": "oval:org.mitre.oval:def:10920",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10920"
            },
            {
              "name": "RHSA-2008:0595",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0595.html"
            },
            {
              "name": "31010",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31010"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-3103",
    "datePublished": "2008-07-09T23:00:00",
    "dateReserved": "2008-07-09T00:00:00",
    "dateUpdated": "2024-08-07T09:28:41.545Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5359

Vulnerability from cvelistv5

Published

2008-12-05 11:00

Modified

2024-08-07 10:49

Severity

Summary

Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the Java AWT library.

References

URL	Tags
http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1	vendor-advisory, x_refsource_SUNALERT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/34259	third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/0672	vdb-entry, x_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/33015	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm	x_refsource_CONFIRM
http://secunia.com/advisories/34889	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34233	third-party-advisory, x_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/47048	vdb-entry, x_refsource_XF
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://secunia.com/advisories/38539	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33528	third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://www.vupen.com/english/advisories/2008/3339	vdb-entry, x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2009-0445.html	vendor-advisory, x_refsource_REDHAT
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5841	vdb-entry, signature, x_refsource_OVAL
http://www.redhat.com/support/errata/RHSA-2009-0016.html	vendor-advisory, x_refsource_REDHAT
http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisory, x_refsource_CERT
http://secunia.com/advisories/33709	third-party-advisory, x_refsource_SECUNIA
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=	x_refsource_CONFIRM
http://secunia.com/advisories/34605	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2009-0015.html	vendor-advisory, x_refsource_REDHAT
http://www.zerodayinitiative.com/advisories/ZDI-08-080/	x_refsource_MISC
http://secunia.com/advisories/33187	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/32991	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm	x_refsource_CONFIRM
http://www.securityfocus.com/bid/32608	vdb-entry, x_refsource_BID
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33710	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.380Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "244987",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
          },
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "jre-image-processing-privilege-escalation(47048)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47048"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "oval:org.mitre.oval:def:5841",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5841"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-080/"
          },
          {
            "name": "33187",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33187"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the Java AWT library."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "244987",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
        },
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "jre-image-processing-privilege-escalation(47048)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47048"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "oval:org.mitre.oval:def:5841",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5841"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-080/"
        },
        {
          "name": "33187",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33187"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5359",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the Java AWT library."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "244987",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
            },
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "jre-image-processing-privilege-escalation(47048)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47048"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "oval:org.mitre.oval:def:5841",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5841"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-08-080/",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-08-080/"
            },
            {
              "name": "33187",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33187"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5359",
    "datePublished": "2008-12-05T11:00:00",
    "dateReserved": "2008-12-04T00:00:00",
    "dateUpdated": "2024-08-07T10:49:12.380Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5356

Vulnerability from cvelistv5

Published

2008-12-05 11:00

Modified

2024-08-07 10:49

Severity

Summary

Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.

References

URL	Tags
http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1	vendor-advisory, x_refsource_SUNALERT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/34259	third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/0672	vdb-entry, x_refsource_VUPEN
http://osvdb.org/50516	vdb-entry, x_refsource_OSVDB
http://secunia.com/advisories/34447	third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/33015	third-party-advisory, x_refsource_SECUNIA
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=757	third-party-advisory, x_refsource_IDEFENSE
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm	x_refsource_CONFIRM
http://secunia.com/advisories/34233	third-party-advisory, x_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2009-0369.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://secunia.com/advisories/38539	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://www.vupen.com/english/advisories/2008/3339	vdb-entry, x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://www.redhat.com/support/errata/RHSA-2009-0016.html	vendor-advisory, x_refsource_REDHAT
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6494	vdb-entry, signature, x_refsource_OVAL
http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisory, x_refsource_CERT
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=	x_refsource_CONFIRM
http://secunia.com/advisories/34605	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
https://exchange.xforce.ibmcloud.com/vulnerabilities/47103	vdb-entry, x_refsource_XF
http://secunia.com/advisories/33187	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/32991	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm	x_refsource_CONFIRM
http://www.securityfocus.com/bid/32608	vdb-entry, x_refsource_BID
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33710	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.830Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "244987",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
          },
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "50516",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/50516"
          },
          {
            "name": "34447",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34447"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "name": "20081204 Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=757"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "RHSA-2009:0369",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6494",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6494"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "jre-truetype-font-bo(47103)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47103"
          },
          {
            "name": "33187",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33187"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "244987",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
        },
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "50516",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/50516"
        },
        {
          "name": "34447",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34447"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "name": "20081204 Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=757"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "RHSA-2009:0369",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6494",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6494"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "jre-truetype-font-bo(47103)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47103"
        },
        {
          "name": "33187",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33187"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5356",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "244987",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1"
            },
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "50516",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/50516"
            },
            {
              "name": "34447",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34447"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "20081204 Sun Java JRE TrueType Font Parsing Heap Overflow Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=757"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "RHSA-2009:0369",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0369.html"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6494",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6494"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "jre-truetype-font-bo(47103)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47103"
            },
            {
              "name": "33187",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33187"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-485.htm"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5356",
    "datePublished": "2008-12-05T11:00:00",
    "dateReserved": "2008-12-04T00:00:00",
    "dateUpdated": "2024-08-07T10:49:12.830Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-5360

Vulnerability from cvelistv5

Published

2008-12-05 11:00

Modified

2024-08-07 10:49

Severity

Summary

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors.

References

URL	Tags
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/34259	third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2009/0672	vdb-entry, x_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2008-1018.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/33015	third-party-advisory, x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm	x_refsource_CONFIRM
http://secunia.com/advisories/34889	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/34233	third-party-advisory, x_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200911-02.xml	vendor-advisory, x_refsource_GENTOO
http://sunsolve.sun.com/search/document.do?assetkey=1-26-244986-1	vendor-advisory, x_refsource_SUNALERT
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html	vendor-advisory, x_refsource_SUSE
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
http://secunia.com/advisories/38539	third-party-advisory, x_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6596	vdb-entry, signature, x_refsource_OVAL
http://secunia.com/advisories/34972	third-party-advisory, x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-0466.html	vendor-advisory, x_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html	vendor-advisory, x_refsource_SUSE
http://secunia.com/advisories/35065	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33528	third-party-advisory, x_refsource_SECUNIA
http://www.securitytracker.com/id?1021316	vdb-entry, x_refsource_SECTRACK
http://rhn.redhat.com/errata/RHSA-2008-1025.html	vendor-advisory, x_refsource_REDHAT
http://marc.info/?l=bugtraq&m=126583436323697&w=2	vendor-advisory, x_refsource_HP
http://www.vupen.com/english/advisories/2008/3339	vdb-entry, x_refsource_VUPEN
http://marc.info/?l=bugtraq&m=123678756409861&w=2	vendor-advisory, x_refsource_HP
https://exchange.xforce.ibmcloud.com/vulnerabilities/47045	vdb-entry, x_refsource_XF
http://www.redhat.com/support/errata/RHSA-2009-0445.html	vendor-advisory, x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2009-0016.html	vendor-advisory, x_refsource_REDHAT
http://www.us-cert.gov/cas/techalerts/TA08-340A.html	third-party-advisory, x_refsource_CERT
http://secunia.com/advisories/33709	third-party-advisory, x_refsource_SECUNIA
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=	x_refsource_CONFIRM
http://secunia.com/advisories/34605	third-party-advisory, x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html	vendor-advisory, x_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2009-0015.html	vendor-advisory, x_refsource_REDHAT
http://secunia.com/advisories/33187	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/32991	third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/32608	vdb-entry, x_refsource_BID
http://secunia.com/advisories/37386	third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/33710	third-party-advisory, x_refsource_SECUNIA

Impacted products

Vendor	Product
n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:49:12.483Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSRT090049",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm"
          },
          {
            "name": "SUSE-SA:2009:018",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
          },
          {
            "name": "34259",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34259"
          },
          {
            "name": "ADV-2009-0672",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0672"
          },
          {
            "name": "RHSA-2008:1018",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
          },
          {
            "name": "33015",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33015"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
          },
          {
            "name": "34889",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34889"
          },
          {
            "name": "34233",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34233"
          },
          {
            "name": "GLSA-200911-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
          },
          {
            "name": "244986",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244986-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
          },
          {
            "name": "SUSE-SA:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
          },
          {
            "name": "SSRT080111",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "38539",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38539"
          },
          {
            "name": "oval:org.mitre.oval:def:6596",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6596"
          },
          {
            "name": "34972",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34972"
          },
          {
            "name": "RHSA-2009:0466",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
          },
          {
            "name": "SUSE-SR:2009:006",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
          },
          {
            "name": "35065",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/35065"
          },
          {
            "name": "33528",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33528"
          },
          {
            "name": "1021316",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1021316"
          },
          {
            "name": "RHSA-2008:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
          },
          {
            "name": "HPSBMA02486",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
          },
          {
            "name": "ADV-2008-3339",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/3339"
          },
          {
            "name": "HPSBUX02411",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
          },
          {
            "name": "jre-guessable-file-unauth-access(47045)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47045"
          },
          {
            "name": "RHSA-2009:0445",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
          },
          {
            "name": "RHSA-2009:0016",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
          },
          {
            "name": "TA08-340A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
          },
          {
            "name": "33709",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
          },
          {
            "name": "34605",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34605"
          },
          {
            "name": "SUSE-SR:2009:010",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
          },
          {
            "name": "RHSA-2009:0015",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
          },
          {
            "name": "33187",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33187"
          },
          {
            "name": "32991",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32991"
          },
          {
            "name": "32608",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/32608"
          },
          {
            "name": "37386",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37386"
          },
          {
            "name": "33710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33710"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-12-03T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSRT090049",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm"
        },
        {
          "name": "SUSE-SA:2009:018",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
        },
        {
          "name": "34259",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34259"
        },
        {
          "name": "ADV-2009-0672",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0672"
        },
        {
          "name": "RHSA-2008:1018",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
        },
        {
          "name": "33015",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33015"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
        },
        {
          "name": "34889",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34889"
        },
        {
          "name": "34233",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34233"
        },
        {
          "name": "GLSA-200911-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
        },
        {
          "name": "244986",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244986-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
        },
        {
          "name": "SUSE-SA:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
        },
        {
          "name": "SSRT080111",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "38539",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38539"
        },
        {
          "name": "oval:org.mitre.oval:def:6596",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6596"
        },
        {
          "name": "34972",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34972"
        },
        {
          "name": "RHSA-2009:0466",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
        },
        {
          "name": "SUSE-SR:2009:006",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
        },
        {
          "name": "35065",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/35065"
        },
        {
          "name": "33528",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33528"
        },
        {
          "name": "1021316",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1021316"
        },
        {
          "name": "RHSA-2008:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
        },
        {
          "name": "HPSBMA02486",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
        },
        {
          "name": "ADV-2008-3339",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/3339"
        },
        {
          "name": "HPSBUX02411",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
        },
        {
          "name": "jre-guessable-file-unauth-access(47045)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47045"
        },
        {
          "name": "RHSA-2009:0445",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
        },
        {
          "name": "RHSA-2009:0016",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
        },
        {
          "name": "TA08-340A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
        },
        {
          "name": "33709",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
        },
        {
          "name": "34605",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34605"
        },
        {
          "name": "SUSE-SR:2009:010",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
        },
        {
          "name": "RHSA-2009:0015",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
        },
        {
          "name": "33187",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33187"
        },
        {
          "name": "32991",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32991"
        },
        {
          "name": "32608",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/32608"
        },
        {
          "name": "37386",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37386"
        },
        {
          "name": "33710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33710"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-5360",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious JAR files via unknown vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSRT090049",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-484.htm"
            },
            {
              "name": "SUSE-SA:2009:018",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html"
            },
            {
              "name": "34259",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34259"
            },
            {
              "name": "ADV-2009-0672",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0672"
            },
            {
              "name": "RHSA-2008:1018",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1018.html"
            },
            {
              "name": "33015",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33015"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm"
            },
            {
              "name": "34889",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34889"
            },
            {
              "name": "34233",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34233"
            },
            {
              "name": "GLSA-200911-02",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200911-02.xml"
            },
            {
              "name": "244986",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-244986-1"
            },
            {
              "name": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf",
              "refsource": "CONFIRM",
              "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf"
            },
            {
              "name": "SUSE-SA:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html"
            },
            {
              "name": "SSRT080111",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "38539",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38539"
            },
            {
              "name": "oval:org.mitre.oval:def:6596",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6596"
            },
            {
              "name": "34972",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34972"
            },
            {
              "name": "RHSA-2009:0466",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2009-0466.html"
            },
            {
              "name": "SUSE-SR:2009:006",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html"
            },
            {
              "name": "35065",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/35065"
            },
            {
              "name": "33528",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33528"
            },
            {
              "name": "1021316",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1021316"
            },
            {
              "name": "RHSA-2008:1025",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2008-1025.html"
            },
            {
              "name": "HPSBMA02486",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=126583436323697\u0026w=2"
            },
            {
              "name": "ADV-2008-3339",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/3339"
            },
            {
              "name": "HPSBUX02411",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=123678756409861\u0026w=2"
            },
            {
              "name": "jre-guessable-file-unauth-access(47045)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47045"
            },
            {
              "name": "RHSA-2009:0445",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0445.html"
            },
            {
              "name": "RHSA-2009:0016",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0016.html"
            },
            {
              "name": "TA08-340A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA08-340A.html"
            },
            {
              "name": "33709",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33709"
            },
            {
              "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid=",
              "refsource": "CONFIRM",
              "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL\u0026DocumentOID=829914\u0026poid="
            },
            {
              "name": "34605",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34605"
            },
            {
              "name": "SUSE-SR:2009:010",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html"
            },
            {
              "name": "RHSA-2009:0015",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2009-0015.html"
            },
            {
              "name": "33187",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33187"
            },
            {
              "name": "32991",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32991"
            },
            {
              "name": "32608",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/32608"
            },
            {
              "name": "37386",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37386"
            },
            {
              "name": "33710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33710"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-5360",
    "datePublished": "2008-12-05T11:00:00",
    "dateReserved": "2008-12-04T00:00:00",
    "dateUpdated": "2024-08-07T10:49:12.483Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags