CVE-2008-1195
Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.68%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 5.68% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-254
- Affected
- sun/jdk · sun/jre · sun/sdk · canonical/ubuntu linux
- Source
- cve@mitre.org
References
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.htmlMailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.htmlMailing List, Third Party Advisory
- http://secunia.com/advisories/29239Third Party Advisory
- http://secunia.com/advisories/29273Third Party Advisory
- http://secunia.com/advisories/29498Third Party Advisory
- http://secunia.com/advisories/29526Third Party Advisory
- http://secunia.com/advisories/29541Third Party Advisory
- http://secunia.com/advisories/29547Third Party Advisory
- http://secunia.com/advisories/29560Third Party Advisory
- http://secunia.com/advisories/29582Third Party Advisory
- http://secunia.com/advisories/29645Third Party Advisory
- http://secunia.com/advisories/29858Third Party Advisory
- http://secunia.com/advisories/29897Third Party Advisory
- http://secunia.com/advisories/30620Third Party Advisory
- http://secunia.com/advisories/30676Third Party Advisory
- http://secunia.com/advisories/30780Third Party Advisory
- http://secunia.com/advisories/31497Third Party Advisory
- http://secunia.com/advisories/32018Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200804-28.xmlThird Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-233326-1Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1Third Party Advisory
- http://support.apple.com/kb/HT3178Third Party Advisory
- http://support.apple.com/kb/HT3179Third Party Advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128Third Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200804-20.xmlThird Party Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200806-11.xmlThird Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:080Third Party Advisory
- http://www.mozilla.org/security/announce/2008/mfsa2008-18.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.