NVD

Id
2993  
Name
CVE-2008-3109  
Description
Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-07-09  
Modified Date
2011-03-07  
Seq
2008-3109  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
18946 2993 CVE-2008-3109 APPLE-SA-2008-09-24  View
18947 2993 CVE-2008-3109 SUSE-SA:2008:042  View
18948 2993 CVE-2008-3109 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and  View
18949 2993 CVE-2008-3109 oval:org.mitre.oval:def:8540  View
18950 2993 CVE-2008-3109 GLSA-200911-02  View
18951 2993 CVE-2008-3109 238687  View
18952 2993 CVE-2008-3109 http://support.apple.com/kb/HT3179  View
18953 2993 CVE-2008-3109 http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm  View
18954 2993 CVE-2008-3109 http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm  View
18955 2993 CVE-2008-3109 RHSA-2008:0594  View
18956 2993 CVE-2008-3109 RHSA-2008:0906  View
18957 2993 CVE-2008-3109 RHSA-2008:1045  View
18958 2993 CVE-2008-3109 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues  View
18959 2993 CVE-2008-3109 30144  View
18960 2993 CVE-2008-3109 1020456  View
18961 2993 CVE-2008-3109 TA08-193A  View
18962 2993 CVE-2008-3109 http://www.vmware.com/security/advisories/VMSA-2008-0016.html  View
18963 2993 CVE-2008-3109 ADV-2008-2056  View
18964 2993 CVE-2008-3109 ADV-2008-2740  View
18965 2993 CVE-2008-3109 sun-jre-scripting-unauth-access(43660)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46218 JVNDB-2008-001528 Sun JDK/JRE のスクリプト言語サポートにおける権限昇格の脆弱性 Sun Java Runtime Environment (JRE) のスクリプト言語サポートにはアプリケーションやアプレットの取り扱いに不備があり、権限昇格の脆弱性があります。 CVE-2008-3109 33222 CVE-2008-3109 2993 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001528.html 2008-07-08 2009-02-04 View