NVD

Id
2021  
Name
CVE-2008-2086  
Description
Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-04  
Modified Date
2016-08-22  
Seq
2008-2086  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
12967 2021 CVE-2008-2086 APPLE-SA-2009-02-12  View
12968 2021 CVE-2008-2086 SUSE-SA:2009:007  View
12969 2021 CVE-2008-2086 SUSE-SA:2009:018  View
12970 2021 CVE-2008-2086 SUSE-SR:2009:010  View
12971 2021 CVE-2008-2086 HPSBUX02411  View
12972 2021 CVE-2008-2086 SSRT090049  View
12973 2021 CVE-2008-2086 oval:org.mitre.oval:def:5601  View
12974 2021 CVE-2008-2086 RHSA-2008:1025  View
12975 2021 CVE-2008-2086 GLSA-200911-02  View
12976 2021 CVE-2008-2086 4693  View
12977 2021 CVE-2008-2086 244988  View
12978 2021 CVE-2008-2086 http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm  View
12979 2021 CVE-2008-2086 http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm  View
12980 2021 CVE-2008-2086 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=  View
12981 2021 CVE-2008-2086 RHSA-2008:1018  View
12982 2021 CVE-2008-2086 RHSA-2009:0015  View
12983 2021 CVE-2008-2086 RHSA-2009:0016  View
12984 2021 CVE-2008-2086 RHSA-2009:0445  View
12985 2021 CVE-2008-2086 20081204 CVE-2008-2086: Java Web Start File Inclusion via System PropertiesOverride  View
12986 2021 CVE-2008-2086 32620  View
12987 2021 CVE-2008-2086 1021318  View
12988 2021 CVE-2008-2086 TA08-340A  View
12989 2021 CVE-2008-2086 http://www.vsecurity.com/bulletins/advisories/2008/JWS-props.txt  View
12990 2021 CVE-2008-2086 ADV-2009-0424  View
12991 2021 CVE-2008-2086 ADV-2009-0672  View
12992 2021 CVE-2008-2086 http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46831 JVNDB-2008-002141 Sun Java Web Start および Java Plug-in における jnlp ファイルの処理に関する任意のコードを実行される脆弱性 Sun Java Web Start および Java Plug-in には、jnlp ファイルの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-2086 32199 CVE-2008-2086 2021 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002141.html 2008-12-03 2009-11-06 View