CVE-2008-3113

Aliases:CGA-2746-785p-38pgCGA-2mpf-p3f3-mvgjCGA-2rxg-9wmg-m5gpCGA-3j8q-h728-wwpqCGA-3p5v-9vr2-pwpgCGA-3pmm-8vw3-85qqCGA-3vxh-395j-fm5pCGA-43qw-jp6v-g7g6CGA-45p3-mjg7-pv9qCGA-46p3-qv9p-6wcvCGA-4c2m-w6vp-5r98CGA-4q5m-g996-gpqgCGA-4qx6-95r8-4f23CGA-547v-pgww-7x8jCGA-65rm-69v8-2vh7CGA-68vq-9cv5-7rwmCGA-6xrw-3hg2-28pwCGA-73xp-jppr-69g7CGA-7qmg-qvw4-xwjqCGA-84xj-c498-5m5pCGA-86x5-vrmv-m74qCGA-8m3x-c9v5-j26mCGA-8mv7-7x5w-g2hmCGA-8r67-4pq7-g97jCGA-8v66-7c39-9h29CGA-8vj3-39fg-c8qgCGA-9hhf-8hcx-5qchCGA-9prp-x242-67hvCGA-9pxx-g6hg-fvpgCGA-9x45-fhqv-j8m4CGA-cr4m-h3rj-rj97CGA-f476-mxcr-ggr8CGA-fc82-6f9g-4rr9CGA-fpq3-hqch-pxf4CGA-g3jf-mvpq-q5h8CGA-g8j2-7fcw-ch74CGA-gmgj-hxc7-rf6qCGA-h55j-2p59-j4f7CGA-h6f9-fqcf-v33vCGA-hxxj-5q2j-p93xCGA-j5rp-v3h9-v9p9CGA-jpv3-5895-pf4cCGA-jqjm-85mj-7qm2CGA-mh2q-fc7c-35f9CGA-mhjm-hcp7-9vp2CGA-mmhc-hgg9-586jCGA-mp87-q5xw-j43hCGA-p6wr-fqrc-264vCGA-p75p-8frp-8mghCGA-p9rv-fxj3-2p4vCGA-pjf7-75vv-3q7rCGA-pq5f-qqqf-34v4CGA-q3vx-wxxr-g324CGA-q6vf-7w69-5h35CGA-q7m5-2hh7-rh9hCGA-qf45-hq6c-6pf4CGA-qw5v-2m3c-h8xjCGA-qw8q-qmv4-824rCGA-r2j5-vxf4-3x58CGA-r3j5-5fqq-g4gwCGA-r43g-797w-ff5qCGA-r63r-74rm-gcg2CGA-r8h9-25rp-28r3CGA-rg2c-43rc-f7vjCGA-rjhf-6w26-fffxCGA-rp54-5hq3-7g65CGA-v4r6-hm2r-64r7CGA-v5p9-jfv7-4h26CGA-w3c8-hfwh-7fvqCGA-w76w-xqjx-2gvxCGA-w9c4-8gc7-x834CGA-wc67-p9x3-gpmqCGA-wjqw-584m-62pcCGA-wp6q-j9j2-2q6hCGA-xpjm-97h6-x8vvCGA-xvj6-jqj8-3qm3CGA-xwqm-g978-9fwwCGA-xxhf-pwp3-g7vg
Advisory lineage Upstream: 0 Downstream: 5
Modified
Published: 09 Jul 2008, 23:00
Last modified:07 Aug 2024, 09:28

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
10 HIGH
v2.0 (nvd)
EPSS Score
6.32% LOW
6% probability -16.67%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Jul 2008, 23:00
Published
Vulnerability first disclosed
07 Aug 2024, 09:28
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.

CVSS Metrics

  • v2.0•HIGH•Score: 10AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 6.32%• Percentile: 93%

Techniques & Countermeasures

  • CWE-264•Permissions, Privileges, and Access Controls

    Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected Systems

  • chainguard•openjdk-11-openj9

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-dbg

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jdk

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jvm

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-doc

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jmods

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jre

    < 0.59.0-r2

  • chainguard•openjdk-17-openj9

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-jre

    < 0.59.0-r1

  • sun•jdk

    ≤ 5.0 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_14 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9

  • sun•jre

    ≤ 1.4.2_17 | ≤ 5.0 | 1.4.2 | 1.4.2_01 | 1.4.2_02 | 1.4.2_03 | 1.4.2_04 | 1.4.2_05 | 1.4.2_06 | 1.4.2_07 | 1.4.2_8 | 1.4.2_9 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15 | 1.4.2_16 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_14 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9

  • sun•sdk

    1.4.2 | 1.4.2_01 | 1.4.2_02 | 1.4.2_03 | 1.4.2_04 | 1.4.2_05 | 1.4.2_06 | 1.4.2_07 | 1.4.2_08 | 1.4.2_09 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15 | 1.4.2_16 | 1.4.2_17

References (36)