CVE-2008-3110
Aliases:CGA-2629-hqqm-3w29CGA-2mgg-p76v-rrmrCGA-2vxj-266h-rhx3CGA-34m9-m99v-xrpgCGA-35pj-7qf7-4w7pCGA-3673-2275-vrpqCGA-3cjh-252h-hwpwCGA-3cqx-hvwg-mp3cCGA-3xqw-8fgv-6wcwCGA-45ph-ppxw-993gCGA-45x3-j245-chw6CGA-4869-cp8q-9hmwCGA-4cwh-w4m7-hcxpCGA-4wmx-gpgh-xghqCGA-55v7-4qm6-9gx3CGA-597g-ch3f-g7gmCGA-6284-55p9-x6x5CGA-6crp-mpq5-9jh7CGA-74jr-qrf4-h93wCGA-74r4-32c3-vxgcCGA-7w7v-vhp7-pf23CGA-87v9-pc46-jw8hCGA-8mcx-qhp8-5m4cCGA-93m9-q5cc-r9xwCGA-952m-xm36-jgjvCGA-985r-66mw-9gxfCGA-9f37-r2pp-275pCGA-9f8j-7xj5-95v9CGA-9gpx-qhj7-f74pCGA-9jcc-w98q-3r6mCGA-9mx6-mwfw-g6g8CGA-9pwv-8m57-92vwCGA-c678-c2g3-wh7qCGA-c67r-vx43-228hCGA-c84p-56x3-5f8mCGA-f5r5-vqcj-x3hgCGA-f7rw-r4cq-4646CGA-f8vr-2mrp-w68jCGA-fwgh-4qv2-9c7qCGA-g7hc-rwxg-r6mwCGA-g7qg-59v3-q53jCGA-h2cc-mqpj-xx92CGA-h877-5x94-h4fhCGA-j3m7-8f58-7fjwCGA-j797-5rhv-6fh3CGA-m66p-652f-xjf3CGA-m6gv-cx5v-wv54CGA-m9hc-6rgf-2935CGA-mg3c-53fh-qwmgCGA-mrf7-94mg-5jfvCGA-mw32-rgwr-5crfCGA-mxx9-ghmv-5fhfCGA-p5qq-fhq6-wh3qCGA-pfq8-392f-58fmCGA-pj5r-w78f-2x79CGA-ppxx-cqq4-c8rrCGA-q43g-wqpm-4fprCGA-q8g4-5prj-m8vgCGA-qg2m-397g-4q8cCGA-qg8g-h642-3w43CGA-r3wp-3x8q-3796CGA-r722-xxq4-8cvfCGA-r894-3rc4-gx2xCGA-r8wh-q9vq-f9hpCGA-r9xw-fqjw-m4r3CGA-rxwf-hw6q-3wwjCGA-v8cg-pcg2-jm82CGA-w2p2-jh26-j9p4CGA-w43v-w8xp-x5rmCGA-w62h-qc9c-mgjwCGA-w84x-rh68-8vqjCGA-wh3g-3fj3-v49rCGA-x492-55cq-5975CGA-x584-qwv7-wq4gCGA-x5q6-mwwr-g637CGA-xcxq-hp28-xg67CGA-xfvp-qmf3-mv54CGA-xxw7-gcrm-h885
Advisory lineage Upstream: 0 Downstream: 2
Downstream
Modified
Published: 09 Jul 2008, 23:00
Last modified:07 Aug 2024, 09:28
Vulnerability Summary
Overall Risk (default)
low
18/100 CVSS Score
4.3 MEDIUM
v2.0 (nvd)
EPSS Score
3.34% LOW
3% probability -3.84%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
09 Jul 2008, 23:00
Published
Vulnerability first disclosed
07 Aug 2024, 09:28
Last Modified
Vulnerability information updated
Description
Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to obtain sensitive information by using an applet to read information from another applet.
CVSS Metrics
- v2.0•MEDIUM•Score: 4.3AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS Trends
Current EPSS score: 3.34%• Percentile: 88%
Techniques & Countermeasures
- CWE-264•Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Affected Systems
- chainguard•openjdk-11-openj9
< 0.59.0-r2
- chainguard•openjdk-11-openj9-dbg
< 0.59.0-r2
- chainguard•openjdk-11-openj9-default-jdk
< 0.59.0-r2
- chainguard•openjdk-11-openj9-default-jvm
< 0.59.0-r2
- chainguard•openjdk-11-openj9-doc
< 0.59.0-r2
- chainguard•openjdk-11-openj9-jmods
< 0.59.0-r2
- chainguard•openjdk-11-openj9-jre
< 0.59.0-r2
- chainguard•openjdk-17-openj9
< 0.59.0-r1
- chainguard•openjdk-17-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-17-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-17-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-17-openj9-doc
< 0.59.0-r1
- chainguard•openjdk-17-openj9-jmods
< 0.59.0-r1
- chainguard•openjdk-17-openj9-jre
< 0.59.0-r1
- chainguard•openjdk-21-openj9
< 0.59.0-r1
- chainguard•openjdk-21-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-21-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-21-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-21-openj9-doc
< 0.59.0-r1
- chainguard•openjdk-21-openj9-jmods
< 0.59.0-r1
- chainguard•openjdk-21-openj9-jre
< 0.59.0-r1
- chainguard•openjdk-25-openj9
< 0.59.0-r1
- chainguard•openjdk-25-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-25-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-25-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-25-openj9-jmods
< 0.59.0-r1
- chainguard•openjdk-25-openj9-jre
< 0.59.0-r1
- chainguard•openjdk-26-openj9
< 0.59.0-r1
- chainguard•openjdk-26-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-26-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-26-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-26-openj9-jmods
< 0.59.0-r1
- chainguard•openjdk-26-openj9-jre
< 0.59.0-r1
- chainguard•openjdk-8-openj9
< 0.59.0-r1
- chainguard•openjdk-8-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-8-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-8-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-8-openj9-doc
< 0.59.0-r1
- chainguard•openjdk-8-openj9-jre
< 0.59.0-r1
- sun•jdk
≤ 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5
- sun•jre
≤ 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5
References (28)
- http://marc.info/?l=bugtraq&m=122331139823057&w=2
- http://secunia.com/advisories/32436
- http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm
- http://secunia.com/advisories/31600
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10734
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
- http://secunia.com/advisories/32018
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-238687-1
- http://security.gentoo.org/glsa/glsa-200911-02.xml
- http://secunia.com/advisories/32179
- http://www.vupen.com/english/advisories/2008/2740
- http://www.securityfocus.com/bid/30144
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html
- http://www.vupen.com/english/advisories/2008/2056/references
- http://secunia.com/advisories/32180
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html
- http://www.redhat.com/support/errata/RHSA-2008-0594.html
- http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm
- http://www.redhat.com/support/errata/RHSA-2008-1045.html
- http://secunia.com/advisories/33238
- http://www.securitytracker.com/id?1020456
- http://www.securityfocus.com/archive/1/497041/100/0/threaded
- http://www.redhat.com/support/errata/RHSA-2008-0906.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43661
- http://www.us-cert.gov/cas/techalerts/TA08-193A.html
- http://secunia.com/advisories/37386
- http://support.apple.com/kb/HT3179
- http://secunia.com/advisories/31010