CVE-2008-1187

Advisory lineage Upstream: 0 Downstream: 8
Modified
Published: 06 Mar 2008, 21:00
Last modified:07 Aug 2024, 08:08

Vulnerability Summary

Overall Risk (default)
medium
32/100
CVSS Score
6.8 MEDIUM
v2.0 (nvd)
EPSS Score
21.62% HIGH
22% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Mar 2008, 21:00
Published
Vulnerability first disclosed
07 Aug 2024, 08:08
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms.

CVSS Metrics

  • v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 21.62%• Percentile: 96%

Techniques & Countermeasures

  • CWE-264•Permissions, Privileges, and Access Controls

    Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected Systems

  • sun•jdk

    ≤ 5.0 | ≤ 6 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9 | 6 | 6:update_1 | 6:update_2 | 6:update_3

  • sun•jre

    ≤ 1.4.2_14 | ≤ 5.0 | ≤ 6 | 1.4.2_01 | 1.4.2_1 | 1.4.2_02 | 1.4.2_03 | 1.4.2_04 | 1.4.2_05 | 1.4.2_06 | 1.4.2_07 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 5.0 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9 | 6 | 6:update_1 | 6:update_2 | 6:update_3

  • sun•sdk

    ≤ 1.4.2_16 | 1.4.2 | 1.4.2_01 | 1.4.2_1 | 1.4.2_02 | 1.4.2_03 | 1.4.2_04 | 1.4.2_05 | 1.4.2_06 | 1.4.2_07 | 1.4.2_08 | 1.4.2_09 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15

References (45)