CVE-2008-1187

Опубликовано: 06 мар. 2008

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms.

Ссылки

http://dev2dev.bea.com/pub/advisory/277
http://download.novell.com/Download?buildid=q5exhSqeBjA~
Patch
http://jvn.jp/en/jp/JVN04032535/index.html
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000016.html
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
http://secunia.com/advisories/29239
Vendor Advisory
http://secunia.com/advisories/29273
Vendor Advisory
http://secunia.com/advisories/29498
Vendor Advisory
http://secunia.com/advisories/29582
Vendor Advisory
http://secunia.com/advisories/29841
Vendor Advisory
http://secunia.com/advisories/29858
Vendor Advisory
http://secunia.com/advisories/29897
Vendor Advisory
http://secunia.com/advisories/29999
Vendor Advisory
http://secunia.com/advisories/30003
Vendor Advisory
http://secunia.com/advisories/30676
Vendor Advisory
http://secunia.com/advisories/30780
Vendor Advisory
http://secunia.com/advisories/31067
Vendor Advisory
http://secunia.com/advisories/31497
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sun:jdk:*:update_14:*:*:*:*:*:*

Версия до 5.0 (включая)

cpe:2.3:a:sun:jdk:*:update_4:*:*:*:*:*:*

Версия до 6 (включая)

cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*

cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*

cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*

Версия до 1.4.2_14 (включая)

cpe:2.3:a:sun:jre:*:update_14:*:*:*:*:*:*

Версия до 5.0 (включая)

cpe:2.3:a:sun:jre:*:update_4:*:*:*:*:*:*

Версия до 6 (включая)

cpe:2.3:a:sun:jre:1.4.2_01:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:1.4.2_02:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:1.4.2_03:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:1.4.2_04:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:1.4.2_05:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:1.4.2_06:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:1.4.2_07:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*

cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*

cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*

cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*

cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*

cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*

Версия до 1.4.2_16 (включая)

cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_01:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_05:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_06:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_07:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*

cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.05422

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2008-1187

ubuntu

больше 18 лет назад

CVE-2008-1187

redhat

больше 18 лет назад

CVE-2008-1187

debian

больше 18 лет назад

Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JD ...

GHSA-8m64-fhc9-rr82

github

больше 4 лет назад

EPSS

Процентиль: 92%

0.05422

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-264