Back to feed
EUVD-2008-1205 · Published Mar 6, 2008
Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.
Technologies
Sun JdkSun JreSun Sdk
Weaknesses
CWE-119
CVSS scores
- v2.06.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://download.novell.com/Download?buildid=q5exhSqeBjA~
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
- http://secunia.com/advisories/29239
- http://secunia.com/advisories/29273
Potentially impacted assets
See if this affects your attack surface
