What’s Vulnerable › Vulnerabilities

CVE-2008-5342

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-12-05 · updated 2026-06-16
• Weakness: CWE-200

Description

Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.

Affected products

• Sun Jdk: through 5.0; through 6; 5.0-update_1, 5.0-update_10, 5.0-update_11, 5.0-update_12, 5.0-update_13, 5.0-update_14 (+19)
• Sun Jre: through 1.4.2_18; through 5.0; through 6; 1.4.2_1, 1.4.2_2, 1.4.2_3, 1.4.2_4, 1.4.2_5, 1.4.2_6 (+37)
• Sun Sdk: through 1.4.2_18; 1.4.2_1, 1.4.2_2, 1.4.2_3, 1.4.2_4, 1.4.2_5, 1.4.2_6 (+11)

References

• http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html
• http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html
• http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
• http://marc.info/?l=bugtraq&m=123678756409861&w=2
• http://marc.info/?l=bugtraq&m=126583436323697&w=2
• http://osvdb.org/50514
• http://rhn.redhat.com/errata/RHSA-2008-1018.html
• http://rhn.redhat.com/errata/RHSA-2008-1025.html
• http://secunia.com/advisories/32991
• http://secunia.com/advisories/33015
• http://secunia.com/advisories/33710

Get alerted when CVE-2008-5342 or the next vulnerability affects your stack