What’s Vulnerable › Vulnerabilities

CVE-2008-3107

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-07-09 · updated 2026-06-16
• Weakness: CWE-264

Description

Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.

Affected products

• Sun Jdk: through 5.0; through 6; 5.0-update_1, 5.0-update_10, 5.0-update_11, 5.0-update_12, 5.0-update_13, 5.0-update_14 (+13)
• Sun Jre: through 1.4.2_17; through 5.0; through 6; 1.4.2, 1.4.2_01, 1.4.2_02, 1.4.2_03, 1.4.2_3, 1.4.2_04 (+31)
• Sun Sdk: through 1.4.2_17; 1.4.2_02, 1.4.2_03, 1.4.2_04, 1.4.2_05, 1.4.2_06, 1.4.2_07 (+9)

References

• http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
• http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
• http://marc.info/?l=bugtraq&m=122331139823057&w=2
• http://secunia.com/advisories/31010
• http://secunia.com/advisories/31055
• http://secunia.com/advisories/31497
• http://secunia.com/advisories/31600
• http://secunia.com/advisories/32018
• http://secunia.com/advisories/32179
• http://secunia.com/advisories/32180
• http://secunia.com/advisories/37386
• http://security.gentoo.org/glsa/glsa-200911-02.xml

Get alerted when CVE-2008-3107 or the next vulnerability affects your stack