CVE-2008-5359: sun jdk

CVSS: 9.3v2.0HighModified

Published 05-12-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-5359 is a high (CVSS 9.3) vulnerability in sun jdk. EPSS estimates a 10.78% chance of exploitation in the next 30 days, higher than 95.7% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

10.78%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6

RHSA-2008:1018 RHSA-2008:1025 RHSA-2009:0015 RHSA-2009:0016 RHSA-2009:0445 RHSA-2009:0466

Timeline

05-12-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the Java AWT library.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

10.78%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.78% on 18-09-2026

18-09-202618-10-2026

EPSS score

10.78%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Sun3 products

jdk1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update2 | 1.5.0:update3 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update7_b03 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0 | 1.6.0:update_10 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7
jre1.3.1 | 1.3.1_2 | 1.3.1_03 | 1.3.1_04 | 1.3.1_05 | 1.3.1_06 | 1.3.1_07 | 1.3.1_08 | 1.3.1_09 | 1.3.1_10 | 1.3.1_11 | 1.3.1_12 | 1.3.1_13 | 1.3.1_14 | 1.3.1_15 | 1.3.1_16 | 1.3.1_17 | 1.3.1_18 | 1.3.1_19 | 1.3.1_20 | 1.3.1_21 | 1.3.1_22 | 1.3.1_23 | 1.4.2 | 1.4.2_1 | 1.4.2_2 | 1.4.2_3 | 1.4.2_4 | 1.4.2_5 | 1.4.2_6 | 1.4.2_7 | 1.4.2_8 | 1.4.2_9 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15 | 1.4.2_16 | 1.4.2_17 | 1.4.2_18 | 1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update2 | 1.6.0 | 1.6.0:update_1 | 1.6.0:update_10 | 1.6.0:update_2 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6
sdk1.3.1 | 1.3.1_01 | 1.3.1_01a | 1.3.1_02 | 1.3.1_03 | 1.3.1_04 | 1.3.1_05 | 1.3.1_06 | 1.3.1_07 | 1.3.1_08 | 1.3.1_09 | 1.3.1_10 | 1.3.1_11 | 1.3.1_12 | 1.3.1_13 | 1.3.1_14 | 1.3.1_15 | 1.3.1_16 | 1.3.1_17 | 1.3.1_18 | 1.3.1_19 | 1.3.1_20 | 1.3.1_21 | 1.3.1_22 | 1.3.1_23 | 1.4.2 | 1.4.2_1 | 1.4.2_2 | 1.4.2_02 | 1.4.2_03 | 1.4.2_3 | 1.4.2_04 | 1.4.2_4 | 1.4.2_5 | 1.4.2_6 | 1.4.2_7 | 1.4.2_8 | 1.4.2_08 | 1.4.2_09 | 1.4.2_9 | 1.4.2_10 | 1.4.2_11 | 1.4.2_12 | 1.4.2_13 | 1.4.2_14 | 1.4.2_15 | 1.4.2_16 | 1.4.2_17 | 1.4.2_18

1 vendor · 3 products

References

39 links

sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1Vendor AdvisoryX Refsource SUNALERTPatch
marc.info?l=bugtraq&m=126583436323697&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/34259Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2009/0672VDB EntryX Refsource VUPENThird Party Advisory
rhn.redhat.com/errata/RHSA-2008-1018.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/33015Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2009-012.htmX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/34889Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/34233Third Party AdvisoryX Refsource SECUNIA

Show all 39 references

exchange.xforce.ibmcloud.com/vulnerabilities/47048VDB EntryX Refsource XFMailing ListThird Party Advisory
security.gentoo.org/glsa/glsa-200911-02.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdfX Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
marc.info?l=bugtraq&m=123678756409861&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/38539Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/34972Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2009-0466.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/35065Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33528Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2008-1025.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.vupen.com/english/advisories/2008/3339VDB EntryX Refsource VUPENThird Party Advisory
www.redhat.com/support/errata/RHSA-2009-0445.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5841VDB EntrySignatureX Refsource OVALThird Party Advisory
www.redhat.com/support/errata/RHSA-2009-0016.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.us-cert.gov/cas/techalerts/TA08-340A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/33709Third Party AdvisoryX Refsource SECUNIA
support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/34605Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.redhat.com/support/errata/RHSA-2009-0015.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-08-080/X Refsource MISCThird Party AdvisoryVDB Entry
secunia.com/advisories/33187Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/32991Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2008-485.htmX Refsource CONFIRMThird Party Advisory
www.securityfocus.com/bid/32608VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/37386Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33710Third Party AdvisoryX Refsource SECUNIA

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities