CVE-2008-0657
Published Feb 7, 2008
Last updated 7 years ago
Overview
- Description
- Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:jre:*:update13:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0284CD7F-4BF7-47EE-A27B-A7A12AD6553D",
"versionEndIncluding": "1.5.0"
},
{
"criteria": "cpe:2.3:a:sun:jre:*:update1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CE4D7F3-A393-40E7-A08D-60527A1658DA",
"versionEndIncluding": "1.6.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sun:jdk:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0346781D-3289-47BB-8D82-D6634F05315F",
"versionEndIncluding": "5.0_update13"
},
{
"criteria": "cpe:2.3:a:sun:jre:*:update1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CE4D7F3-A393-40E7-A08D-60527A1658DA",
"versionEndIncluding": "1.6.0"
}
],
"operator": "OR"
}
]
}
]