CVE-2008-0657

Sun JRE < 1.5.0 and < 1.6.0, JDK < 5.0_update13 - Privilege Escalation via Untrusted Application or Applet

Title source: llm
STIX 2.1

Description

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.

References (26)

Core 26
Core References
Vendor Advisory vendor-advisory x_refsource_bea
http://dev2dev.bea.com/pub/advisory/277
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30676
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29841
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11505
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27650
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29897
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29498
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200804-28.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29858
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0429
Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-231261-1
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019308
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1252
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28795
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0156.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31497
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28888
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0210.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30780
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1856/references
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29214
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0123.html
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml

Scores

EPSS 0.0202
EPSS Percentile 84.0%

Details

CWE
CWE-264
Status published
Products (3)
sun/jdk < 5.0_update13
sun/jre < 1.5.0
sun/jre < 1.6.0
Published Feb 07, 2008
Tracked Since Feb 18, 2026