NVD

Id
1148  
Name
CVE-2008-1188  
Description
Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with (1) a long key name in the xml header or (2) a long charset value, different issues than CVE-2008-1189, aka "The first two issues."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-03-06  
Modified Date
2011-03-07  
Seq
2008-1188  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
7055 1148 CVE-2008-1188 APPLE-SA-2008-09-24  View
7056 1148 CVE-2008-1188 SUSE-SA:2008:018  View
7057 1148 CVE-2008-1188 SUSE-SA:2008:025  View
7058 1148 CVE-2008-1188 oval:org.mitre.oval:def:11209  View
7059 1148 CVE-2008-1188 GLSA-200804-28  View
7060 1148 CVE-2008-1188 233323  View
7061 1148 CVE-2008-1188 http://support.apple.com/kb/HT3178  View
7062 1148 CVE-2008-1188 http://support.apple.com/kb/HT3179  View
7063 1148 CVE-2008-1188 GLSA-200804-20  View
7064 1148 CVE-2008-1188 GLSA-200806-11  View
7065 1148 CVE-2008-1188 RHSA-2008:0186  View
7066 1148 CVE-2008-1188 RHSA-2008:0210  View
7067 1148 CVE-2008-1188 RHSA-2008:0267  View
7068 1148 CVE-2008-1188 1019549  View
7069 1148 CVE-2008-1188 TA08-066A  View
7070 1148 CVE-2008-1188 http://www.vmware.com/security/advisories/VMSA-2008-0010.html  View
7071 1148 CVE-2008-1188 ADV-2008-0770  View
7072 1148 CVE-2008-1188 ADV-2008-1856  View
7073 1148 CVE-2008-1188 http://www.zerodayinitiative.com/advisories/ZDI-08-009/  View
7074 1148 CVE-2008-1188 http://www.zerodayinitiative.com/advisories/ZDI-08-010/  View
7075 1148 CVE-2008-1188 javawebstart-application-priv-escalation(41029)  View
7076 1148 CVE-2008-1188 javawebstart-multiple-unspecified-bo(41133)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45842 JVNDB-2008-001152 Sun JDK/JRE の Java Web Start における複数のバッファオーバーフローの脆弱性 Sun JDK/JRE の Java Web Start には、複数のバッファオーバーフローが発生する脆弱性が存在します。 CVE-2008-1188 31301 CVE-2008-1188 1148 6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001152.html 2008-03-04 2008-10-09 View