CVE-2008-5353
EXPLOITEDSun Java Calendar Deserialization Privilege Escalation
Title source: metasploitExploitation Summary
CVE-2008-5353 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 5 public exploits from researchers including Metasploit, Landon Fuller, sf, including a Metasploit module exploits/multi/browser/java_calendar_deserialize.
AI-analyzed exploit summary This exploit dynamically generates a signed Java applet to bypass security warnings, leveraging social engineering to execute arbitrary code on the victim's machine. It uses the CVE-2008-5353 vulnerability to achieve remote code execution via a crafted JAR file.
Description
The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
Exploits (5)
This exploit dynamically generates a signed Java applet to bypass security warnings, leveraging social engineering to execute arbitrary code on the victim's machine. It uses the CVE-2008-5353 vulnerability to achieve remote code execution via a crafted JAR file.
This Metasploit module exploits a deserialization flaw in the Sun Java Calendar class (CVE-2008-5353) to achieve remote code execution. It delivers a malicious JAR file via an HTML page with an embedded applet, supporting multiple payload types including reverse shells and native executables.
The document describes CVE-2008-5353, a Java sandbox escape vulnerability affecting Mac OS X JVMs, allowing arbitrary command execution via malicious applets. It includes a proof-of-concept link demonstrating the exploit.
This Metasploit module exploits a deserialization flaw in Sun Java Calendar objects (CVE-2008-5353) to achieve remote code execution. It supports multiple platforms and payload types, including native executables and Java-based shells.
This Metasploit module exploits a deserialization flaw in the Sun JVM's Calendar object handling, allowing privilege escalation or remote code execution via a malicious Java applet. It supports multiple platforms and payload types, including reverse/bind shells and native executables.