CVE-2008-5343

Aliases:CGA-2223-39f7-rcr9CGA-24p7-96f5-rfrxCGA-29qq-x3jq-26r2CGA-2c68-7h7j-q7jgCGA-2cm8-8mg3-p3pfCGA-2pm2-4j92-m6pqCGA-3wq7-86r7-3rx3CGA-3wrc-g2qx-j4mgCGA-4q78-488f-9mjpCGA-53j8-x949-3pxmCGA-5553-c5qv-c2qrCGA-5wwm-8pc4-cm2vCGA-64v8-rrvc-89rvCGA-695m-8775-h8x5CGA-69ch-9f7f-w99jCGA-6cw4-hqp6-346cCGA-6ff3-prm6-25vrCGA-6rgf-hj3x-h3p8CGA-74m5-rjc9-mh54CGA-7fc6-mw4r-gj4mCGA-7rmp-662m-8jwwCGA-7xr5-22w7-2256CGA-8rrr-vx6f-42r4CGA-8xrm-x69r-73p3CGA-9cx3-fgm7-7c33CGA-9wjh-q4mr-fp5jCGA-c9qp-fvh3-mrmgCGA-cch7-fm7v-fgv3CGA-cg68-hpw9-87hqCGA-cgh9-64r3-r62cCGA-cmvx-jffv-3c8hCGA-cp32-hjwr-5m28CGA-cp6x-vwxg-8jrpCGA-cqxh-x954-3f2qCGA-cvfv-jv7m-q3x7CGA-f49h-v5x3-3wmjCGA-f8mr-9f4q-hgxgCGA-f94q-q252-vqc3CGA-fc33-jqx9-3mxpCGA-fhjr-5p93-qrv3CGA-fjq9-6cqf-xwjxCGA-hrv3-v5pj-4wcfCGA-j29w-4c8p-4p9fCGA-j585-6xp4-637hCGA-j6rq-vxfw-wc5vCGA-jgvv-94ch-j4f3CGA-jjvc-j397-pg79CGA-jmgc-f343-ggjhCGA-jqvr-xqwq-g8pwCGA-m6p5-xpwh-p6ghCGA-mppf-h6jj-fxrjCGA-mq4f-9cc5-vc6mCGA-p776-864c-frwcCGA-p8qp-m5hp-9vr5CGA-p92g-vq9f-jhfwCGA-pp99-8mxq-fw8cCGA-pp9w-4cmp-xrxqCGA-pq65-rrhx-4qqxCGA-qh6r-vq65-66qvCGA-qhgq-24rv-8vv2CGA-qp63-pxpm-47xmCGA-qp7x-29wh-78f8CGA-qvxf-3hqm-33pvCGA-r589-mm3r-pcc2CGA-r5ch-g7vp-r562CGA-r93v-h6cm-wc5vCGA-rx9w-rmfm-9xgqCGA-v4hm-pj9c-v46qCGA-v5qj-vcfc-p72fCGA-vmg9-92qv-7xgqCGA-wrgg-cjhq-3xc8CGA-wrp8-qj7x-8gw5CGA-ww2j-x56g-rfvhCGA-x233-77p5-9qxgCGA-x29m-g845-mm37CGA-x9q9-47vh-fxwgCGA-xrgp-322g-xhq4CGA-xvq5-f8wf-jrv2
Advisory lineage Upstream: 0 Downstream: 5
Modified
Published: 05 Dec 2008, 11:00
Last modified:07 Aug 2024, 10:49

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9 HIGH
v2.0 (nvd)
EPSS Score
5.09% LOW
5% probability +0.06%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

05 Dec 2008, 11:00
Published
Vulnerability first disclosed
07 Aug 2024, 10:49
Last Modified
Vulnerability information updated

Description

Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.

CVSS Metrics

  • v2.0•HIGH•Score: 9AV:N/AC:L/Au:N/C:C/I:P/A:P

EPSS Trends

Current EPSS score: 5.09%• Percentile: 92%

Affected Systems

  • chainguard•openjdk-11-openj9

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-dbg

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jdk

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-default-jvm

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-doc

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jmods

    < 0.59.0-r2

  • chainguard•openjdk-11-openj9-jre

    < 0.59.0-r2

  • chainguard•openjdk-17-openj9

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-17-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-21-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-25-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jmods

    < 0.59.0-r1

  • chainguard•openjdk-26-openj9-jre

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-dbg

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jdk

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-default-jvm

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-doc

    < 0.59.0-r1

  • chainguard•openjdk-8-openj9-jre

    < 0.59.0-r1

  • sun•jdk

    ≤ 5.0 | ≤ 6 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_14 | 5.0:update_15 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9 | 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5 | 6:update_6 | 6:update_7 | 6:update_8 | 6:update_9

  • sun•jre

    ≤ 1.4.2_18 | ≤ 5.0 | ≤ 6 | 1.4.2_1 | 1.4.2_2 | 1.4.2_3 | 1.4.2_4 | 1.4.2_5 | 1.4.2_6 | 1.4.2_7 | 1.4.2_8 | 1.4.2_9 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15 | 1.4.2_16 | 1.4.2_17 | 5.0 | 5.0:update_1 | 5.0:update_10 | 5.0:update_11 | 5.0:update_12 | 5.0:update_13 | 5.0:update_14 | 5.0:update_15 | 5.0:update_2 | 5.0:update_3 | 5.0:update_4 | 5.0:update_5 | 5.0:update_6 | 5.0:update_7 | 5.0:update_8 | 5.0:update_9 | 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5 | 6:update_6 | 6:update_7 | 6:update_8 | 6:update_9

  • sun•sdk

    ≤ 1.4.2_18 | 1.4.2_1 | 1.4.2_2 | 1.4.2_3 | 1.4.2_4 | 1.4.2_5 | 1.4.2_6 | 1.4.2_7 | 1.4.2_8 | 1.4.2_9 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15 | 1.4.2_16 | 1.4.2_17

References (35)