First published: Thu Mar 06 2008(Updated: )
Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different issue than CVE-2008-1188, aka the "third" issue.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sun JDK | =1.6.0-update_4 | |
Sun JDK | =1.5.0-update3 | |
Sun JDK | =1.5.0-update11 | |
Sun JDK | =1.6.0-update_3 | |
Sun JDK | =1.5.0-update9 | |
Sun JDK | =1.5.0-update6 | |
Sun JDK | =1.5.0-update14 | |
Sun JDK | =1.5.0-update1 | |
Sun JDK | =1.5.0-update4 | |
Sun JDK | =1.5.0-update7 | |
Sun JDK | =1.5.0-update12 | |
Sun JDK | =1.5.0-update5 | |
Sun JDK | =1.5.0-update2 | |
Sun JDK | =1.5.0-update13 | |
Sun JDK | =1.5.0-update8 | |
Sun JDK | =1.5.0-update10 | |
Sun JDK | =1.5.0 | |
Sun JDK | =1.6.0 | |
Sun JRE | =1.6.0-update_3 | |
Sun JRE | =1.4.2_7 | |
Sun JRE | =1.4.2_16 | |
Sun JRE | =1.4.2_4 | |
Sun JRE | =1.4.2_2 | |
Sun JRE | =1.5.0-update2 | |
Sun JRE | =1.6.0-update_1 | |
Sun JRE | =1.4.2_15 | |
Sun JRE | =1.5.0-update13 | |
Sun JRE | =1.6.0-update_2 | |
Sun JRE | =1.4.2_13 | |
Sun JRE | =1.4.2_1 | |
Sun JRE | =1.4.2_8 | |
Sun JRE | =1.5.0-update12 | |
Sun JRE | =1.5.0-update8 | |
Sun JRE | =1.4.2_12 | |
Sun JRE | =1.5.0-update11 | |
Sun JRE | =1.6.0 | |
Sun JRE | =1.4.2_14 | |
Sun JRE | =1.5.0-update7 | |
Sun JRE | =1.5.0-update3 | |
Sun JRE | =1.4.2_10 | |
Sun JRE | =1.5.0-update5 | |
Sun JRE | =1.5.0-update14 | |
Sun JRE | =1.4.2_9 | |
Sun JRE | =1.4.2 | |
Sun JRE | =1.5.0-update6 | |
Sun JRE | =1.5.0-update9 | |
Sun JRE | =1.4.2_11 | |
Sun JRE | =1.5.0-update1 | |
Sun JRE | =1.5.0-update10 | |
Sun JRE | =1.6.0-update_4 | |
Sun JRE | =1.4.2_3 | |
Sun JRE | =1.5.0-update4 | |
Sun JRE | =1.4.2_5 | |
Sun JRE | =1.4.2_6 | |
Sun JRE | =1.5.0 | |
Sun SDK | =1.4.2 | |
Sun SDK | =1.4.2_10 | |
Sun SDK | =1.4.2_12 | |
Sun SDK | =1.4.2_14 | |
Sun SDK | =1.4.2_13 | |
Sun SDK | =1.4.2_6 | |
Sun SDK | =1.4.2_2 | |
Sun SDK | =1.4.2_5 | |
Sun SDK | =1.4.2_1 | |
Sun SDK | =1.4.2_4 | |
Sun SDK | =1.4.2_7 | |
Sun SDK | =1.4.2_8 | |
Sun SDK | =1.4.2_16 | |
Sun SDK | =1.4.2_11 | |
Sun SDK | =1.4.2_9 | |
Sun SDK | =1.4.2_3 | |
Sun SDK | =1.4.2_15 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-1189 has a severity rating of critical due to its potential to allow remote code execution.
To fix CVE-2008-1189, users should update to the latest version of the JDK or JRE where the vulnerability has been patched.
CVE-2008-1189 affects Sun JDK versions 1.6.0_update_4 and earlier, as well as multiple 1.5.0 and 1.4.2 versions.
CVE-2008-1189 can allow attackers to execute arbitrary code on affected systems, potentially leading to data breaches or system compromise.
Yes, CVE-2008-1189 specifically affects the Java Web Start component within the Java Runtime Environment.