6.8
CVSSv2

CVE-2008-1192

Published: 06/03/2008 Updated: 31/07/2019
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and previous versions, and 5.0 Update 14 and previous versions; and SDK and JRE 1.4.2_16 and previous versions, and 1.3.1_21 and previous versions; allows remote malicious users to bypass the same origin policy and "execute local applications" via unknown vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

sun jdk 1.5.0

sun jdk 1.6.0

sun jre 1.3.1_2

sun jre 1.3.1_09

sun jre 1.3.1_11

sun jre 1.3.1_18

sun jre 1.3.1_20

sun jre 1.4.2_3

sun jre 1.4.2_5

sun jre 1.4.2_12

sun jre 1.4.2_14

sun jre 1.5.0

sun jre 1.3.1_12

sun jre 1.3.1_13

sun jre 1.3.1_14

sun jre 1.3.1_15

sun jre 1.3.1_16

sun jre 1.4.2_7

sun jre 1.4.2_8

sun jre 1.4.2_9

sun jre 1.4.2_10

sun jre 1.3.1_04

sun jre 1.3.1_05

sun jre 1.3.1_06

sun jre 1.3.1_07

sun jre 1.3.1_21

sun jre 1.4.2

sun jre 1.4.2_1

sun jre 1.4.2_2

sun jre 1.4.2_15

sun jre 1.4.2_16

sun jre 1.6.0

sun jre 1.3.1

sun jre 1.3.1_03

sun jre 1.3.1_08

sun jre 1.3.1_10

sun jre 1.3.1_17

sun jre 1.3.1_19

sun jre 1.4.2_4

sun jre 1.4.2_6

sun jre 1.4.2_11

sun jre 1.4.2_13

sun sdk 1.4.2_9

sun sdk 1.4.2_10

sun sdk 1.4.2_11

sun sdk 1.4.2_12

sun sdk 1.3.1_07

sun sdk 1.3.1_08

sun sdk 1.3.1_09

sun sdk 1.3.1_10

sun sdk 1.3.1_11

sun sdk 1.4.2

sun sdk 1.4.2_1

sun sdk 1.4.2_2

sun sdk 1.4.2_3

sun sdk 1.4.2_4

sun sdk 1.3.1

sun sdk 1.3.1_01

sun sdk 1.3.1_01a

sun sdk 1.3.1_02

sun sdk 1.3.1_16

sun sdk 1.3.1_17

sun sdk 1.3.1_18

sun sdk 1.3.1_19

sun sdk 1.4.2_6

sun sdk 1.4.2_8

sun sdk 1.4.2_13

sun sdk 1.4.2_15

sun sdk 1.3.1_04

sun sdk 1.3.1_06

sun sdk 1.3.1_13

sun sdk 1.3.1_15

sun sdk 1.3.1_20

sun sdk 1.4.2_5

sun sdk 1.4.2_7

sun sdk 1.4.2_14

sun sdk 1.4.2_16

sun sdk 1.3.1_03

sun sdk 1.3.1_05

sun sdk 1.3.1_12

sun sdk 1.3.1_14

sun sdk 1.3.1_21

References

CWE-254http://sunsolve.sun.com/search/document.do?assetkey=1-26-233324-1http://www.redhat.com/support/errata/RHSA-2008-0186.htmlhttp://www.securitytracker.com/id?1019550http://secunia.com/advisories/29273http://www.us-cert.gov/cas/techalerts/TA08-066A.htmlhttp://secunia.com/advisories/29239http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0210.htmlhttp://secunia.com/advisories/29498http://secunia.com/advisories/29582http://dev2dev.bea.com/pub/advisory/277http://secunia.com/advisories/29841http://www.gentoo.org/security/en/glsa/glsa-200804-20.xmlhttp://security.gentoo.org/glsa/glsa-200804-28.xmlhttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.htmlhttp://secunia.com/advisories/29858http://secunia.com/advisories/29897http://www.vmware.com/security/advisories/VMSA-2008-0010.htmlhttp://www.gentoo.org/security/en/glsa/glsa-200806-11.xmlhttp://secunia.com/advisories/31497http://secunia.com/advisories/30676http://secunia.com/advisories/30780http://support.apple.com/kb/HT3178http://secunia.com/advisories/32018http://support.apple.com/kb/HT3179http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0267.htmlhttp://www.vupen.com/english/advisories/2008/0770/referenceshttp://www.vupen.com/english/advisories/2008/1252http://www.vupen.com/english/advisories/2008/1856/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/41031https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11813https://nvd.nist.gov