NVD

Id
5129  
Name
CVE-2008-5351  
Description
Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-12-05  
Modified Date
2016-08-22  
Seq
2008-5351  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
32196 5129 CVE-2008-5351 SUSE-SA:2009:007  View
32197 5129 CVE-2008-5351 SUSE-SR:2009:006  View
32198 5129 CVE-2008-5351 SUSE-SA:2009:018  View
32199 5129 CVE-2008-5351 SUSE-SR:2009:010  View
32200 5129 CVE-2008-5351 HPSBUX02411  View
32201 5129 CVE-2008-5351 SSRT090049  View
32202 5129 CVE-2008-5351 oval:org.mitre.oval:def:6212  View
32203 5129 CVE-2008-5351 RHSA-2008:1018  View
32204 5129 CVE-2008-5351 RHSA-2008:1025  View
32205 5129 CVE-2008-5351 GLSA-200911-02  View
32206 5129 CVE-2008-5351 245246  View
32207 5129 CVE-2008-5351 http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm  View
32208 5129 CVE-2008-5351 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=  View
32209 5129 CVE-2008-5351 RHSA-2009:0016  View
32210 5129 CVE-2008-5351 RHSA-2009:0369  View
32211 5129 CVE-2008-5351 RHSA-2009:0445  View
32212 5129 CVE-2008-5351 32608  View
32213 5129 CVE-2008-5351 1021311  View
32214 5129 CVE-2008-5351 TA08-340A  View
32215 5129 CVE-2008-5351 ADV-2008-3339  View
32216 5129 CVE-2008-5351 ADV-2009-0672  View
32217 5129 CVE-2008-5351 http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf  View
32218 5129 CVE-2008-5351 RHSA-2009:0466  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46840 JVNDB-2008-002150 Java Runtime Environment (JRE) における防御メカニズムの回避が容易となる脆弱性 Java Runtime Environment (JRE) には、最短形式でない UTF-8 のエンコードを受け入れるため、最短形式の UTF-8 エンコードに依存したアプリケーションに対する防御メカニズムの回避が容易となる脆弱性が存在します。 CVE-2008-5351 35464 CVE-2008-5351 5129 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002150.html 2008-12-03 2009-11-06 View