CVE-2008-1191

Aliases:CGA-2pm8-p69c-3p82CGA-2q4j-r639-m9gqCGA-342h-h4q4-23r9CGA-3g25-95r2-w3gqCGA-3pfc-m4q2-8v39CGA-3rmh-hx5v-wqjqCGA-4jc9-jgj2-mxv8CGA-4q77-77ph-pfhjCGA-4r66-p52f-j9x8CGA-4x2j-xmr8-5xmcCGA-5677-79rh-r55fCGA-5cfx-329h-jcmxCGA-5r5h-f7cg-qvw6CGA-653h-5wfg-85vwCGA-66wc-6ch4-rqjmCGA-6vv4-jqm6-89wqCGA-79j4-9pgh-2fg7CGA-7m6f-p93p-p8jmCGA-7pgh-jpj9-89c7CGA-888h-r7q6-2396CGA-8c4x-fm2f-hh5rCGA-8g64-h6q6-9qh5CGA-97vm-4qv2-9h52CGA-c5rg-9vwc-mvpgCGA-cfgr-rf7x-6mmxCGA-cp69-h9p5-mr8cCGA-cx9x-24rq-r5gfCGA-f3wm-53mw-wqqwCGA-f543-p4wj-p385CGA-f5qw-jg49-hhqxCGA-f6v7-x6g9-gxgrCGA-fj6p-5qvx-h585CGA-fjcq-6m97-8c5qCGA-g79r-jfch-93mqCGA-g8fq-fw7p-66hpCGA-gj65-64qx-c4v6CGA-gv24-prxc-736vCGA-gwx7-qq8j-83hhCGA-h3xw-2rx3-wfw7CGA-h4jp-6w67-fff6CGA-hcj8-m3xr-rxrpCGA-hfvg-mw9p-m3rcCGA-hm6v-9vv2-x5f2CGA-hqx2-f9q4-pg2vCGA-j24m-7529-5w2gCGA-jgv9-4qf8-266wCGA-jq69-9h8m-7mf8CGA-jv8q-j287-2fmrCGA-m4c2-3pw6-8v86CGA-m678-f2xg-3h3qCGA-mjwv-6cm3-7px8CGA-mmwv-636h-j6jwCGA-pccw-jr7v-vj85CGA-pf37-88xg-5p8vCGA-pjh7-9wpg-r87rCGA-q4w7-fhx6-f9h9CGA-q97w-4wc2-p54qCGA-qc7r-5rvw-5wx4CGA-qmv9-mrvq-4w8wCGA-qr44-vrp4-r4vcCGA-r2xc-hph6-472gCGA-r3c6-7923-gpx3CGA-r6j5-9828-m4mvCGA-r9m6-xh46-38q6CGA-rcqv-v8vf-px97CGA-rhgm-46xv-m2j8CGA-rqvm-6fpv-w8fhCGA-rw9x-635c-vmm9CGA-rwxq-j8w2-pr9cCGA-v5jg-w5hf-8hxqCGA-v66g-9hgh-rmg7CGA-v7g2-89m9-3fvjCGA-vhmj-rm3g-5rx4CGA-vvh4-rgcf-4rq7CGA-vxv9-v786-rvv5CGA-w3hf-8w84-rjjgCGA-wg9j-g964-93vfCGA-x79g-9m65-52f2
Advisory lineage Upstream: 0 Downstream: 1
Downstream
RHSA-2008:0267
Modified
Published: 06 Mar 2008, 21:00
Last modified:07 Aug 2024, 08:08

Vulnerability Summary

Overall Risk (default)
medium
28/100
CVSS Score
6.8 MEDIUM
v2.0 (nvd)
EPSS Score
3.65% LOW
4% probability -6.21%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Mar 2008, 21:00
Published
Vulnerability first disclosed
07 Aug 2024, 08:08
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via an untrusted application, a different issue than CVE-2008-1190, aka "The fifth issue."

CVSS Metrics

  • v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 3.65%• Percentile: 89%

Affected Systems

  • chainguard•openjdk-11-openj9

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-dbg

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jdk

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jvm

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-doc

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jmods

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jre

    < 0.59.0-r2

  • chainguard•openjdk-17-openj9

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-jre

    < 0.59.0-r1

  • sun•jdk

    ≤ 6_update_4

  • sun•jre

    ≤ 6_update_4

References (25)