NVD

Id
2995  
Name
CVE-2008-3111  
Description
Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by (a) an application that grants itself privileges to (1) read local files, (2) write to local files, or (3) execute local programs; and as demonstrated by (b) a long value associated with a java-vm-args attribute in a j2se tag in a JNLP file, which triggers a stack-based buffer overflow in the GetVMArgsOption function; aka CR 6557220.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-07-09  
Modified Date
2012-10-29  
Seq
2008-3111  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
18986 2995 CVE-2008-3111 APPLE-SA-2008-09-24  View
18987 2995 CVE-2008-3111 SUSE-SA:2008:042  View
18988 2995 CVE-2008-3111 SUSE-SA:2008:043  View
18989 2995 CVE-2008-3111 SUSE-SA:2008:045  View
18990 2995 CVE-2008-3111 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and  View
18991 2995 CVE-2008-3111 oval:org.mitre.oval:def:10541  View
18992 2995 CVE-2008-3111 GLSA-200911-02  View
18993 2995 CVE-2008-3111 238905  View
18994 2995 CVE-2008-3111 http://support.apple.com/kb/HT3178  View
18995 2995 CVE-2008-3111 http://support.apple.com/kb/HT3179  View
18996 2995 CVE-2008-3111 RHSA-2008:0595  View
18997 2995 CVE-2008-3111 RHSA-2008:0790  View
18998 2995 CVE-2008-3111 20080717 ZDI-08-043: Sun Java Web Start vm args Stack Buffer Overflow  View
18999 2995 CVE-2008-3111 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues  View
19000 2995 CVE-2008-3111 30148  View
19001 2995 CVE-2008-3111 1020452  View
19002 2995 CVE-2008-3111 TA08-193A  View
19003 2995 CVE-2008-3111 http://www.vmware.com/security/advisories/VMSA-2008-0016.html  View
19004 2995 CVE-2008-3111 ADV-2008-2056  View
19005 2995 CVE-2008-3111 ADV-2008-2740  View
19006 2995 CVE-2008-3111 http://www.zerodayinitiative.com/advisories/ZDI-08-043/  View
19007 2995 CVE-2008-3111 sun-javawebstart-unspecified-bo(43664)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46222 JVNDB-2008-001532 Sun Java Web Start における複数のバッファオーバーフローの脆弱性 Sun Java Web Start には、信頼されていないアプリケーションによる複数のバッファオーバーフローの脆弱性が存在します。 CVE-2008-3111 33224 CVE-2008-3111 2995 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001532.html 2008-07-08 2008-11-26 View