CVE-2008-3107
Summary
| CVE | CVE-2008-3107 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-07-09 23:41:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs. |
Risk And Classification
Primary CVSS: v2.0 10 from [email protected]
AV:N/AC:L/Au:N/C:C/I:C/A:C
Problem Types: CWE-264 | NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Sun | Jdk | 5.0 | update_1 | All | All |
| Application | Sun | Jdk | 5.0 | update_10 | All | All |
| Application | Sun | Jdk | 5.0 | update_11 | All | All |
| Application | Sun | Jdk | 5.0 | update_12 | All | All |
| Application | Sun | Jdk | 5.0 | update_13 | All | All |
| Application | Sun | Jdk | 5.0 | update_14 | All | All |
| Application | Sun | Jdk | 5.0 | update_2 | All | All |
| Application | Sun | Jdk | 5.0 | update_3 | All | All |
| Application | Sun | Jdk | 5.0 | update_4 | All | All |
| Application | Sun | Jdk | 5.0 | update_5 | All | All |
| Application | Sun | Jdk | 5.0 | update_6 | All | All |
| Application | Sun | Jdk | 5.0 | update_7 | All | All |
| Application | Sun | Jdk | 5.0 | update_8 | All | All |
| Application | Sun | Jdk | 5.0 | update_9 | All | All |
| Application | Sun | Jdk | 6 | update_1 | All | All |
| Application | Sun | Jdk | 6 | update_2 | All | All |
| Application | Sun | Jdk | 6 | update_3 | All | All |
| Application | Sun | Jdk | 6 | update_4 | All | All |
| Application | Sun | Jdk | 6 | update_5 | All | All |
| Application | Sun | Jdk | All | update_15 | All | All |
| Application | Sun | Jdk | All | update_6 | All | All |
| Application | Sun | Jre | 1.4.2 | All | All | All |
| Application | Sun | Jre | 1.4.2_01 | All | All | All |
| Application | Sun | Jre | 1.4.2_02 | All | All | All |
| Application | Sun | Jre | 1.4.2_03 | All | All | All |
| Application | Sun | Jre | 1.4.2_04 | All | All | All |
| Application | Sun | Jre | 1.4.2_05 | All | All | All |
| Application | Sun | Jre | 1.4.2_06 | All | All | All |
| Application | Sun | Jre | 1.4.2_07 | All | All | All |
| Application | Sun | Jre | 1.4.2_10 | All | All | All |
| Application | Sun | Jre | 1.4.2_11 | All | All | All |
| Application | Sun | Jre | 1.4.2_12 | All | All | All |
| Application | Sun | Jre | 1.4.2_13 | All | All | All |
| Application | Sun | Jre | 1.4.2_14 | All | All | All |
| Application | Sun | Jre | 1.4.2_15 | All | All | All |
| Application | Sun | Jre | 1.4.2_16 | All | All | All |
| Application | Sun | Jre | 1.4.2_3 | All | All | All |
| Application | Sun | Jre | 1.4.2_8 | All | All | All |
| Application | Sun | Jre | 1.4.2_9 | All | All | All |
| Application | Sun | Jre | 5.0 | update_1 | All | All |
| Application | Sun | Jre | 5.0 | update_10 | All | All |
| Application | Sun | Jre | 5.0 | update_11 | All | All |
| Application | Sun | Jre | 5.0 | update_12 | All | All |
| Application | Sun | Jre | 5.0 | update_13 | All | All |
| Application | Sun | Jre | 5.0 | update_14 | All | All |
| Application | Sun | Jre | 5.0 | update_2 | All | All |
| Application | Sun | Jre | 5.0 | update_3 | All | All |
| Application | Sun | Jre | 5.0 | update_4 | All | All |
| Application | Sun | Jre | 5.0 | update_5 | All | All |
| Application | Sun | Jre | 5.0 | update_6 | All | All |
| Application | Sun | Jre | 5.0 | update_7 | All | All |
| Application | Sun | Jre | 5.0 | update_8 | All | All |
| Application | Sun | Jre | 5.0 | update_9 | All | All |
| Application | Sun | Jre | 6 | update_1 | All | All |
| Application | Sun | Jre | 6 | update_2 | All | All |
| Application | Sun | Jre | 6 | update_3 | All | All |
| Application | Sun | Jre | 6 | update_4 | All | All |
| Application | Sun | Jre | 6 | update_5 | All | All |
| Application | Sun | Jre | All | All | All | All |
| Application | Sun | Jre | All | update_15 | All | All |
| Application | Sun | Jre | All | update_6 | All | All |
| Application | Sun | Sdk | 1.4.2_02 | All | All | All |
| Application | Sun | Sdk | 1.4.2_03 | All | All | All |
| Application | Sun | Sdk | 1.4.2_04 | All | All | All |
| Application | Sun | Sdk | 1.4.2_05 | All | All | All |
| Application | Sun | Sdk | 1.4.2_06 | All | All | All |
| Application | Sun | Sdk | 1.4.2_07 | All | All | All |
| Application | Sun | Sdk | 1.4.2_08 | All | All | All |
| Application | Sun | Sdk | 1.4.2_09 | All | All | All |
| Application | Sun | Sdk | 1.4.2_10 | All | All | All |
| Application | Sun | Sdk | 1.4.2_11 | All | All | All |
| Application | Sun | Sdk | 1.4.2_12 | All | All | All |
| Application | Sun | Sdk | 1.4.2_13 | All | All | All |
| Application | Sun | Sdk | 1.4.2_14 | All | All | All |
| Application | Sun | Sdk | 1.4.2_15 | All | All | All |
| Application | Sun | Sdk | 1.4.2_16 | All | All | All |
| Application | Sun | Sdk | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| US-CERT Technical Cyber Security Alert TA08-193A -- Sun Java Updates for Multiple Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.us-cert.gov | US Government Resource |
| Red Hat Network Satellite Server Update for Sun Java / IBM Java Runtime - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Sun Java Runtime Environment Virtual Machine Privilege Escalation Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| SUSE update for Sun Java - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| About the security content of Java for Mac OS X 10.4, Release 7 | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Sun Java JDK / JRE Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| #238967: Security Vulnerability in the Java Runtime Environment Virtual Machine may allow an untrusted Application or Applet to Elevate Privileges | af854a3a-2127-422b-91ae-364da2661108 | sunsolve.sun.com | |
| Java Runtime Environment (JRE) Virtual Machine Bug Lets Remote Users Access Files and Gain Privileges on the Target System - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Mac OS X Java Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Gentoo Linux Documentation -- Sun JDK/JRE: Multiple vulnerabilites | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| VMSA-2008-0016.2 - VMware | af854a3a-2127-422b-91ae-364da2661108 | www.vmware.com | |
| VMware VirtualCenter Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Gentoo updates for sun-jre-bin, sun-jdk, blackdown-jre, blackdown-jdk, and emul-linux-x86-java - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| 'VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| APPLE-SA-2008-09-24 Java for Mac OS X 10.4, Release 7 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | |
| Red Hat update for java-1.5.0-sun - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| About the security content of Java for Mac OS X 10.5 Update 2 | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | |
| [security-announce] SUSE Security Announcement: Sun Java (SUSE-SA:2008:0 | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| rhn.redhat.com | Red Hat Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| VMware ESX Server Sun Java JDK / JRE Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.