CVE-2008-5340

Aliases:CGA-2c2f-qjrq-mxhrCGA-2gqx-gwpx-989gCGA-35q8-p6q9-2pvmCGA-375p-47rj-2cwhCGA-383q-xq3f-h9vfCGA-3jp7-37qq-pv54CGA-3wjc-vg28-rm2mCGA-42cf-mxwc-2fv5CGA-4fvh-qhp6-5pwxCGA-4mxf-q3xc-59r4CGA-4w8m-7p6g-v378CGA-54xr-9vxm-6c8gCGA-5cvf-5rgx-438gCGA-5h72-ppw3-j8fjCGA-5x52-mx88-fx46CGA-6ch5-4xv4-xj6pCGA-6g6w-j67j-3j4xCGA-6h49-2wxj-8pfcCGA-6j2m-x2jm-26h4CGA-6p8m-qwgx-v7hcCGA-772p-5r3m-p6h9CGA-786j-p43w-w562CGA-7cx6-hrjq-x3pcCGA-8233-hcph-w62xCGA-85m3-c3f9-9vv6CGA-8f7f-j9mv-g86gCGA-8vv3-c72v-fm3vCGA-8x3q-8cv8-3cfcCGA-93jh-rc58-q4m7CGA-979m-hhv3-9vq2CGA-997g-p7pm-x2jmCGA-9cgh-xf9c-352fCGA-9r7w-9fcw-hc88CGA-9v5f-jmmq-3vgxCGA-9xq9-8c54-rx7rCGA-f49r-hxpq-mxc4CGA-f582-3xf6-m5h2CGA-f7gw-397g-344fCGA-fr93-gfrp-9v85CGA-g376-mhr4-h5v7CGA-g44m-ff8h-3mv9CGA-g894-5f72-wmw9CGA-grmm-68x4-7vqrCGA-h6cp-qj4m-w96mCGA-hq4q-vg3v-wmrcCGA-hq8h-mf8g-w3q5CGA-hwc5-jr9f-j5mrCGA-jhpc-qf8q-fw43CGA-jjfh-pwg2-583rCGA-m2h4-p9gg-w29rCGA-mq55-hpqp-3pwqCGA-mwp9-42gm-r5m2CGA-p662-rvg8-6jfvCGA-pf7x-xc42-j3qfCGA-pg4m-5xhq-352rCGA-pjqv-v3p7-jh5mCGA-q474-jwfm-3vr7CGA-q58w-xgf6-vqfvCGA-qpcg-qwc6-779hCGA-qqrc-cc3j-9r8pCGA-qrj7-5q26-49p2CGA-qx2r-vw6p-46vjCGA-r46g-9f2w-h9hwCGA-rfp3-84xp-524cCGA-v6hh-wmwv-r3pgCGA-v6p5-jrp5-2w9rCGA-v7v5-r24c-wf3vCGA-vfrg-66r9-f2f9CGA-vh43-7r2v-j8p4CGA-whwm-95qg-vvgqCGA-wqjj-vr55-66r7CGA-wr96-7rqx-53cxCGA-wx9c-hcw7-c5qhCGA-x2jg-wf9j-x52hCGA-x34g-v685-wc6hCGA-x7w9-42m5-2gh3CGA-xc75-j7fc-r2mjCGA-xwp4-pfww-8522
Advisory lineage Upstream: 0 Downstream: 5
Modified
Published: 05 Dec 2008, 11:00
Last modified:07 Aug 2024, 10:49

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
10 HIGH
v2.0 (nvd)
EPSS Score
3.68% LOW
4% probability -0.33%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

05 Dec 2008, 11:00
Published
Vulnerability first disclosed
07 Aug 2024, 10:49
Last Modified
Vulnerability information updated

Description

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications via unknown vectors, aka 6727081.

CVSS Metrics

  • v2.0•HIGH•Score: 10AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 3.68%• Percentile: 89%

Techniques & Countermeasures

  • CWE-264•Permissions, Privileges, and Access Controls

    Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected Systems

  • chainguard•openjdk-11-openj9

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-dbg

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jdk

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jvm

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-doc

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jmods

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jre

    < 0.59.0-r2

  • chainguard•openjdk-17-openj9

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-jre

    < 0.59.0-r1

  • sun•jdk

    ≤ 5.0 | ≤ 6 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_14 | 5.0:update_15 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9 | 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5 | 6:update_6 | 6:update_7 | 6:update_8 | 6:update_9

  • sun•jre

    ≤ 1.4.2_18 | ≤ 5.0 | ≤ 6 | 1.4.2_1 | 1.4.2_2 | 1.4.2_3 | 1.4.2_4 | 1.4.2_5 | 1.4.2_6 | 1.4.2_7 | 1.4.2_8 | 1.4.2_9 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15 | 1.4.2_16 | 1.4.2_17 | 5.0 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_14 | 5.0:update_15 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9 | 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5 | 6:update_6 | 6:update_7 | 6:update_8 | 6:update_9

  • sun•sdk

    ≤ 1.4.2_18 | 1.4.2_1 | 1.4.2_2 | 1.4.2_3 | 1.4.2_4 | 1.4.2_5 | 1.4.2_6 | 1.4.2_7 | 1.4.2_8 | 1.4.2_9 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15 | 1.4.2_16 | 1.4.2_17

References (32)