CVE-2008-1193

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-1193. PoCs published by Chris Evans.

AI-analyzed exploit summary The provided text is a vulnerability description for CVE-2008-1193, detailing a heap-based buffer overflow in Sun Java Runtime Environment. It lacks actual exploit code, instead referencing an image file (31343.jpg) and providing version details of affected software.

Description

Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to gain privileges via an untrusted application.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Chris Evans · textdosmultiple

https://www.exploit-db.com/exploits/31343

View Code ZIP pw:eip

The provided text is a vulnerability description for CVE-2008-1193, detailing a heap-based buffer overflow in Sun Java Runtime Environment. It lacks actual exploit code, instead referencing an image file (31343.jpg) and providing version details of affected software.

Classification

Writeup 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Theoretical

Target: Sun Java Runtime Environment (JDK/JRE 6 prior to Update 5, JDK/JRE 5.0 prior to Update 15, SDK/JRE prior to 1.4.2_17, SDK/JRE prior to 1.3.1_22)

No auth needed

Prerequisites: User interaction to execute malicious Java applet or application

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (36)

Core 36

Core References

Mailing List, Third Party Advisory vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30676

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29841

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/41028

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0267.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1019551

Patch, Third Party Advisory vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-26-233325-1

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0245.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32018

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29897

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29498

Third Party Advisory vendor-advisory x_refsource_bea

http://dev2dev.bea.com/pub/advisory/277

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-200804-28.xml

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29239

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29858

Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert

http://www.us-cert.gov/cas/techalerts/TA08-066A.html

Mailing List, Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html

Third Party Advisory x_refsource_confirm

http://support.apple.com/kb/HT3178

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29582

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1252

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/0770/references

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/31497

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0210.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/28125

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30780

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0244.html

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1856/references

Third Party Advisory x_refsource_confirm

http://www.vmware.com/security/advisories/VMSA-2008-0010.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30003

Third Party Advisory vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11409

Third Party Advisory vendor-advisory x_refsource_gentoo

http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml

Third Party Advisory vendor-advisory x_refsource_gentoo

http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml

Third Party Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0186.html

Third Party Advisory x_refsource_confirm

http://support.apple.com/kb/HT3179

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29273

Java Runtime Environment <6.4 - Privilege Escalation

Exploitation Summary

Description

Exploits (1)

References (36)

Scores

Details