CVE-2008-3109
Summary
| CVE | CVE-2008-3109 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-07-09 23:41:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Sun | Jdk | 6 | update_1 | All | All |
| Application | Sun | Jdk | 6 | update_2 | All | All |
| Application | Sun | Jdk | 6 | update_3 | All | All |
| Application | Sun | Jdk | 6 | update_4 | All | All |
| Application | Sun | Jdk | 6 | update_5 | All | All |
| Application | Sun | Jdk | All | update_6 | All | All |
| Application | Sun | Jre | 6 | update_1 | All | All |
| Application | Sun | Jre | 6 | update_2 | All | All |
| Application | Sun | Jre | 6 | update_3 | All | All |
| Application | Sun | Jre | 6 | update_4 | All | All |
| Application | Sun | Jre | 6 | update_5 | All | All |
| Application | Sun | Jre | All | update_6 | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| US-CERT Technical Cyber Security Alert TA08-193A -- Sun Java Updates for Multiple Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.us-cert.gov | US Government Resource |
| rhn.redhat.com | Red Hat Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| Sun Java Runtime Environment Multiple Security Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Red Hat update for java-1.6.0-bea - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| SUSE update for Sun Java - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| SecurityTracker.com Archives - Java Runtime Environment (JRE) Scripting Language Bugs Let Remote Users Access Files and Gain Privileges on the Target System | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Red Hat update for java-1.6.0-ibm - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Sun Java JDK / JRE Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| Mac OS X Java Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Gentoo Linux Documentation -- Sun JDK/JRE: Multiple vulnerabilites | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| VMSA-2008-0016.2 - VMware | af854a3a-2127-422b-91ae-364da2661108 | www.vmware.com | |
| VMware VirtualCenter Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Gentoo updates for sun-jre-bin, sun-jdk, blackdown-jre, blackdown-jdk, and emul-linux-x86-java - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| 'VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and' - MARC | af854a3a-2127-422b-91ae-364da2661108 | marc.info | |
| APPLE-SA-2008-09-24 Java for Mac OS X 10.5 Update 2 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | |
| #238687: Security Vulnerabilities in the Java Runtime Environment Scripting Language Support | af854a3a-2127-422b-91ae-364da2661108 | sunsolve.sun.com | Patch |
| SecurityFocus | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| About the security content of Java for Mac OS X 10.5 Update 2 | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | |
| [security-announce] SUSE Security Announcement: Sun Java (SUSE-SA:2008:0 | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| ASA-2008-509 (RHSA-2008-1045) | af854a3a-2127-422b-91ae-364da2661108 | support.avaya.com | |
| ASA-2008-428 (RHSA-2008-0906) | af854a3a-2127-422b-91ae-364da2661108 | support.avaya.com | |
| rhn.redhat.com | Red Hat Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| VMware ESX Server Sun Java JDK / JRE Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.