CVE-2008-1187

Aliases:CGA-2446-jpg9-529pCGA-348f-mg6v-rcv4CGA-3c38-57p9-mx87CGA-4959-jwf4-fxx2CGA-4f7v-x2xr-x2prCGA-4j26-fmgh-3h5mCGA-53jg-j83f-592qCGA-54gp-ghg9-43xpCGA-57fm-8c42-77p9CGA-63xq-7cqr-pwhcCGA-6434-r8r5-5g52CGA-66r9-7r83-63x3CGA-688m-rpp9-r8w9CGA-6f4p-wrrq-3wpxCGA-6m5q-9hfc-xgpwCGA-6p4g-wp9j-2vqmCGA-7mj3-f77j-fjp7CGA-7v89-w98q-4vfwCGA-87pw-7pfg-69x9CGA-8qmr-953h-rfr2CGA-9xw5-xc5p-vq2xCGA-c4j4-93xw-9qhhCGA-c57p-783j-r99xCGA-c835-89fm-8xv9CGA-c9p8-ww3h-438vCGA-cfcw-w7m4-c8w9CGA-ch66-r43c-xccjCGA-cqxw-3cwc-75q4CGA-cwr6-pm8j-grj9CGA-f9m6-wj49-2wfvCGA-fcrc-8j6m-vw5pCGA-fjfx-9mr6-fmqrCGA-fmw6-c959-294xCGA-fppj-j6x5-g3g5CGA-fq33-946v-6xhwCGA-fwvj-3m8h-m5vwCGA-fxgm-rx69-7q2mCGA-g32x-8jh6-7gjpCGA-g4vx-c523-6mh9CGA-gg7c-p7m7-rc23CGA-gw9q-4jfg-pf3rCGA-h3rg-4xpr-hcv9CGA-h63x-w62c-3585CGA-h75p-7qpv-7824CGA-hg29-7j3j-xq9pCGA-hg3j-9vmc-7r9pCGA-hh8j-q75r-p7f6CGA-hhgx-hxv7-rq4xCGA-jq3v-mx88-7gg4CGA-jrf2-5922-9cf7CGA-jwm6-vmr5-fvg5CGA-m9gp-vr5g-8jr5CGA-mhqr-2whq-hjp4CGA-mm2j-cgqw-hfmvCGA-mvwq-59fh-4qghCGA-mx2x-4j52-r3g4CGA-p736-jv27-h366CGA-pr3j-phc3-j7cwCGA-px95-g3m7-7rx5CGA-q5w3-wq76-jjh9CGA-q8v6-9fj8-57v4CGA-qvvc-m58q-8rg5CGA-qx7x-mq44-fcf8CGA-qx9v-vg47-qhjxCGA-rpwq-49pj-mh76CGA-v6c9-3xh5-fjp5CGA-v6g3-52j5-fqwjCGA-v766-9mvx-33v4CGA-v76v-3345-fvrxCGA-vjqc-f8rc-xfw6CGA-w3cc-62xj-r55xCGA-w4x3-cv2h-x4m8CGA-wf63-356f-j5xpCGA-wgw2-387r-78f5CGA-x2hf-c7qc-rw46CGA-x3jr-pf8w-4g89CGA-x3w3-984v-cvr8CGA-x5p8-4gmw-7g5q
Advisory lineage Upstream: 0 Downstream: 8
Modified
Published: 06 Mar 2008, 21:00
Last modified:07 Aug 2024, 08:08

Vulnerability Summary

Overall Risk (default)
medium
28/100
CVSS Score
6.8 MEDIUM
v2.0 (nvd)
EPSS Score
5.42% LOW
5% probability -16.19%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Mar 2008, 21:00
Published
Vulnerability first disclosed
07 Aug 2024, 08:08
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms.

CVSS Metrics

  • v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 5.42%• Percentile: 92%

Techniques & Countermeasures

  • CWE-264•Permissions, Privileges, and Access Controls

    Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected Systems

  • chainguard•openjdk-11-openj9

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-dbg

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jdk

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jvm

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-doc

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jmods

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jre

    < 0.59.0-r2

  • chainguard•openjdk-17-openj9

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-jre

    < 0.59.0-r1

  • sun•jdk

    ≤ 5.0 | ≤ 6 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9 | 6 | 6:update_1 | 6:update_2 | 6:update_3

  • sun•jre

    ≤ 1.4.2_14 | ≤ 5.0 | ≤ 6 | 1.4.2_01 | 1.4.2_1 | 1.4.2_02 | 1.4.2_03 | 1.4.2_04 | 1.4.2_05 | 1.4.2_06 | 1.4.2_07 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 5.0 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9 | 6 | 6:update_1 | 6:update_2 | 6:update_3

  • sun•sdk

    ≤ 1.4.2_16 | 1.4.2 | 1.4.2_01 | 1.4.2_1 | 1.4.2_02 | 1.4.2_03 | 1.4.2_04 | 1.4.2_05 | 1.4.2_06 | 1.4.2_07 | 1.4.2_08 | 1.4.2_09 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15

References (45)