What’s Vulnerable › Vulnerabilities

CVE-2008-0657

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-02-07 · updated 2026-06-16
• Weakness: CWE-264

Description

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.

Affected products

• Sun Jdk: through 5.0_update13
• Sun Jre: through 1.5.0; through 1.6.0

References

• http://dev2dev.bea.com/pub/advisory/277
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
• http://secunia.com/advisories/28795
• http://secunia.com/advisories/28888
• http://secunia.com/advisories/29214
• http://secunia.com/advisories/29498
• http://secunia.com/advisories/29841
• http://secunia.com/advisories/29858
• http://secunia.com/advisories/29897
• http://secunia.com/advisories/30676
• http://secunia.com/advisories/30780
• http://secunia.com/advisories/31497

Get alerted when CVE-2008-0657 or the next vulnerability affects your stack