CVE-2008-3551

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-08-08 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in Sun Java Platform Micro Edition (aka Java ME, J2ME, or mobile Java), as distributed in Sun Wireless Toolkit 2.5.2, allow remote attackers to execute arbitrary code via unknown vectors. NOTE: as of 20080807, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a company led by a well-known researcher, it is being assigned a CVE identifier for tracking purposes.

Affected products

Sun Java Platform Micro Edition: all versions
Sun Wireless Toolkit: 2.5.2

References

http://www.security-explorations.com/n2press.htm
http://www.security-explorations.com/n2srp.htm
http://www.security-explorations.com/n2vendors.htm
http://www.security-explorations.com/report_toc.pdf
http://www.securityfocus.com/archive/1/495224/100/0/threaded
http://www.securityfocus.com/bid/30591
https://exchange.xforce.ibmcloud.com/vulnerabilities/44478
http://www.security-explorations.com/n2press.htm
http://www.security-explorations.com/n2srp.htm
http://www.security-explorations.com/n2vendors.htm
http://www.security-explorations.com/report_toc.pdf
http://www.securityfocus.com/archive/1/495224/100/0/threaded

Get alerted when CVE-2008-3551 or the next vulnerability affects your stack