CVE-2008-5347
Aliases:CGA-2466-2wjw-3726CGA-27p6-mv5c-cv88CGA-29w3-47p9-4qwmCGA-2jwv-f5pf-h53hCGA-2pc3-g75c-v89jCGA-3vq4-mg8p-vpmmCGA-3xwf-m8w4-8hxjCGA-489r-792w-jj4fCGA-4v6q-mhgr-2qmpCGA-5345-r7hj-p7v7CGA-57r2-fj92-vh7rCGA-5c7j-75h4-x7jwCGA-5j7p-84g9-9qcmCGA-5m58-6w4q-9p79CGA-5pp9-8c7p-7j8pCGA-5rqr-4h85-r82rCGA-5vrj-f7pc-6jfxCGA-6r7j-g3wx-cff7CGA-6vm3-qrjf-x6mwCGA-7gw8-gw74-gxxpCGA-7p85-998h-grfvCGA-82fh-42jm-v668CGA-84pp-87ff-wpxqCGA-882p-w5mr-gch3CGA-8qjj-29q3-g63jCGA-9ppw-mvcp-rc9hCGA-9vrf-ffhp-g98fCGA-c5rj-xg3q-q54mCGA-cw96-v5qr-r9v6CGA-f5gw-xw76-52xvCGA-fmx3-9qqr-79cxCGA-fv77-6h75-3pwgCGA-h8gw-xr5f-jvphCGA-hhc7-qmvv-hqxjCGA-hhpx-fw6c-65h7CGA-hxx4-pv55-qr4gCGA-j334-g7qv-vf4vCGA-jcqh-4v78-955qCGA-jp42-vmx8-jwggCGA-jpcf-mjgp-4vpjCGA-mjw7-6px4-x9fcCGA-mp62-3hqj-vx47CGA-mrgj-gmpp-7jmrCGA-p8vx-m2p5-cfr8CGA-pc2p-hh3x-rxjcCGA-prc6-w26c-42c3CGA-pxpf-r9vj-63g2CGA-q55m-wc2c-x2cjCGA-q5v9-385c-jfr2CGA-q6w4-ppmw-h45hCGA-q73r-w667-358gCGA-q774-xxwv-c5crCGA-qfvr-w7qf-xqc3CGA-r3px-fwr7-jp8hCGA-r66q-rw42-9h7gCGA-r85q-5c89-29cqCGA-r962-rv85-68fcCGA-rhw6-45m6-m62jCGA-rpm5-p9pq-6chqCGA-rqc8-w45q-crv5CGA-rrh3-xg9g-w7x2CGA-rxjp-w3g9-fjw4CGA-vhmr-28c6-xrf7CGA-vj5m-h27h-m799CGA-vm7j-7ghw-56g6CGA-vxh3-5vgc-gw9mCGA-vxr2-vqm6-rrcpCGA-wf2x-wqmp-rgrxCGA-wfm9-rmf9-vgqjCGA-wh6v-wv9j-49fhCGA-wvff-ph2r-8pm4CGA-x8pg-wmp9-jxh5CGA-x92f-jmg7-m879CGA-xqf2-5986-wvjpCGA-xvmh-h6hw-cgq4CGA-xvpv-h6qv-pp55CGA-xvr6-m3cw-pw3pCGA-xxpv-fwhj-96mv
Advisory lineage Upstream: 0 Downstream: 2
Downstream
Modified
Published: 05 Dec 2008, 11:00
Last modified:07 Aug 2024, 10:49
Vulnerability Summary
Overall Risk (default)
medium
31/100 CVSS Score
7.5 HIGH
v2.0 (nvd)
EPSS Score
3.43% LOW
3% probability +0.66%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
05 Dec 2008, 11:00
Published
Vulnerability first disclosed
07 Aug 2024, 10:49
Last Modified
Vulnerability information updated
Description
Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets and applications to gain privileges via vectors related to access to inner classes in the (1) JAX-WS and (2) JAXB packages.
CVSS Metrics
- v2.0•HIGH•Score: 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS Trends
Current EPSS score: 3.43%• Percentile: 88%
Techniques & Countermeasures
- CWE-264•Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Affected Systems
- chainguard•openjdk-11-openj9
< 0.59.0-r2
- chainguard•openjdk-11-openj9-dbg
< 0.59.0-r2
- chainguard•openjdk-11-openj9-default-jdk
< 0.59.0-r2
- chainguard•openjdk-11-openj9-default-jvm
< 0.59.0-r2
- chainguard•openjdk-11-openj9-doc
< 0.59.0-r2
- chainguard•openjdk-11-openj9-jmods
< 0.59.0-r2
- chainguard•openjdk-11-openj9-jre
< 0.59.0-r2
- chainguard•openjdk-17-openj9
< 0.59.0-r1
- chainguard•openjdk-17-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-17-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-17-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-17-openj9-doc
< 0.59.0-r1
- chainguard•openjdk-17-openj9-jmods
< 0.59.0-r1
- chainguard•openjdk-17-openj9-jre
< 0.59.0-r1
- chainguard•openjdk-21-openj9
< 0.59.0-r1
- chainguard•openjdk-21-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-21-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-21-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-21-openj9-doc
< 0.59.0-r1
- chainguard•openjdk-21-openj9-jmods
< 0.59.0-r1
- chainguard•openjdk-21-openj9-jre
< 0.59.0-r1
- chainguard•openjdk-25-openj9
< 0.59.0-r1
- chainguard•openjdk-25-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-25-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-25-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-25-openj9-jmods
< 0.59.0-r1
- chainguard•openjdk-25-openj9-jre
< 0.59.0-r1
- chainguard•openjdk-26-openj9
< 0.59.0-r1
- chainguard•openjdk-26-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-26-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-26-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-26-openj9-jmods
< 0.59.0-r1
- chainguard•openjdk-26-openj9-jre
< 0.59.0-r1
- chainguard•openjdk-8-openj9
< 0.59.0-r1
- chainguard•openjdk-8-openj9-dbg
< 0.59.0-r1
- chainguard•openjdk-8-openj9-default-jdk
< 0.59.0-r1
- chainguard•openjdk-8-openj9-default-jvm
< 0.59.0-r1
- chainguard•openjdk-8-openj9-doc
< 0.59.0-r1
- chainguard•openjdk-8-openj9-jre
< 0.59.0-r1
- sun•jdk
≤ 6 | 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5 | 6:update_6 | 6:update_7 | 6:update_8
- sun•jre
≤ 6 | 6 | 6:update_1 | 6:update_2 | 6:update_3 | 6:update_4 | 6:update_5 | 6:update_6 | 6:update_7 | 6:update_8
References (26)
- http://marc.info/?l=bugtraq&m=126583436323697&w=2
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-246366-1
- http://www.securitytracker.com/id?1021307
- http://secunia.com/advisories/34259
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47068
- http://www.vupen.com/english/advisories/2009/0672
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019798.1-1
- http://rhn.redhat.com/errata/RHSA-2008-1018.html
- http://secunia.com/advisories/33015
- http://secunia.com/advisories/34233
- http://security.gentoo.org/glsa/glsa-200911-02.xml
- http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf
- http://osvdb.org/50506
- http://marc.info/?l=bugtraq&m=123678756409861&w=2
- http://secunia.com/advisories/38539
- http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html
- http://secunia.com/advisories/33528
- http://www.vupen.com/english/advisories/2008/3339
- http://www.us-cert.gov/cas/techalerts/TA08-340A.html
- http://secunia.com/advisories/33709
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=
- http://www.redhat.com/support/errata/RHSA-2009-0015.html
- http://secunia.com/advisories/32991
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5633
- http://www.securityfocus.com/bid/32608
- http://secunia.com/advisories/37386