Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.3
CVSSv2

CVE-2008-5356

Published: 05/12/2008 Updated: 29/09/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Subscribe to Sun

Vulnerability Summary

Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and previous versions; JDK and JRE 5.0 Update 16 and previous versions; and SDK and JRE 1.4.2_18 and previous versions might allow remote malicious users to execute arbitrary code via a crafted TrueType font file.

Vulnerable Product Search on Vulmon Subscribe to Product

sun jdk 6

sun jre 6

sun jre 5.0

sun jdk 5.0

sun jdk

sun jre 1.4.2_15

sun sdk 1.4.2_15

sun jre 1.4.2_11

sun sdk 1.4.2_11

sun sdk 1.4.2_7

sun jre 1.4.2_6

sun sdk 1.4.2_3

sun jre 1.4.2_2

sun jre

sun jre 1.4.2_17

sun sdk 1.4.2_17

sun jre 1.4.2_13

sun sdk 1.4.2_13

sun jre 1.4.2_9

sun sdk 1.4.2_9

sun jre 1.4.2_8

sun sdk 1.4.2_5

sun jre 1.4.2_4

sun sdk 1.4.2_1

sun sdk

sun jre 1.4.2_14

sun sdk 1.4.2_14

sun jre 1.4.2_10

sun sdk 1.4.2_10

sun sdk 1.4.2_6

sun jre 1.4.2_5

sun sdk 1.4.2_2

sun jre 1.4.2_1

sun jre 1.4.2_16

sun sdk 1.4.2_16

sun jre 1.4.2_12

sun sdk 1.4.2_12

sun sdk 1.4.2_8

sun jre 1.4.2_7

sun sdk 1.4.2_4

sun jre 1.4.2_3

Vendor Advisories

Red Hat: Critical: java-1.5.0-ibm security update
Synopsis Critical: java-150-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-150-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 4 Extras and 5 SupplementaryThis update has been rated as having critical security impact by the R ...
Red Hat: Critical: java-1.6.0-sun security update
Synopsis Critical: java-160-sun security update Type/Severity Security Advisory: Critical Topic Updated java-160-sun packages that correct several security issues arenow available for Red Hat Enterprise Linux 4 Extras and 5 SupplementaryThis update has been rated as having critical security impact by t ...
Red Hat: Critical: java-1.6.0-ibm security update
Synopsis Critical: java-160-ibm security update Type/Severity Security Advisory: Critical Topic Updated java-160-ibm packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 4 Extras and Red Hat EnterpriseLinux 5 SupplementaryThis update has been rated as having critical ...
Red Hat: Low: java-1.5.0-ibm security update
Synopsis Low: java-150-ibm security update Type/Severity Security Advisory: Low Topic Updated java-150-ibm packages that fix several security issues are nowavailable for Red Hat Network Satellite ServerThis update has been rated as having low security impact by the Red HatSecurity Response Team ...
Red Hat: Critical: java-1.5.0-sun security update
Synopsis Critical: java-150-sun security update Type/Severity Security Advisory: Critical Topic Updated java-150-sun packages that correct several security issues arenow available for Red Hat Enterprise Linux 4 Extras and 5 SupplementaryThis update has been rated as having critical security impact by t ...

References

CWE-119http://sunsolve.sun.com/search/document.do?assetkey=1-26-244987-1http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=757http://secunia.com/advisories/32991http://rhn.redhat.com/errata/RHSA-2008-1018.htmlhttp://secunia.com/advisories/33015http://rhn.redhat.com/errata/RHSA-2008-1025.htmlhttp://www.securityfocus.com/bid/32608http://www.us-cert.gov/cas/techalerts/TA08-340A.htmlhttp://secunia.com/advisories/33710http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.htmlhttp://secunia.com/advisories/33187http://support.avaya.com/elmodocs2/security/ASA-2008-485.htmhttp://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0016.htmlhttp://support.avaya.com/elmodocs2/security/ASA-2009-012.htmhttp://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdfhttp://secunia.com/advisories/34259http://marc.info/?l=bugtraq&m=123678756409861&w=2http://www.vupen.com/english/advisories/2009/0672http://secunia.com/advisories/34233http://secunia.com/advisories/34447http://www.redhat.com/support/errata/RHSA-2009-0369.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.htmlhttp://secunia.com/advisories/34605http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.htmlhttp://secunia.com/advisories/35065https://rhn.redhat.com/errata/RHSA-2009-0466.htmlhttp://secunia.com/advisories/34972http://osvdb.org/50516http://security.gentoo.org/glsa/glsa-200911-02.xmlhttp://secunia.com/advisories/37386http://secunia.com/advisories/38539http://www.vupen.com/english/advisories/2008/3339http://marc.info/?l=bugtraq&m=126583436323697&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/47103https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6494https://nvd.nist.govhttps://access.redhat.com/errata/RHSA-2009:0016
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook