CVE-2008-1195: Critical severity java development kit (jdk) vulnerability

Published Mar 6, 2008

Updated

Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.216 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.

Affected Software

80 affected components

Sun JDK=1.6.0-update_4

Sun JDK=1.5.0-update3

Sun JDK=1.5.0-update11

Sun JDK=1.6.0-update_3

Sun JDK=1.5.0-update9

Sun JDK=1.5.0-update6

Sun JDK=1.5.0-update14

Sun JDK=1.5.0-update1

Sun JDK=1.5.0-update4

Sun JDK=1.5.0-update7

Sun JDK=1.5.0-update12

Sun JDK=1.5.0-update5

Sun JDK=1.5.0-update2

Sun JDK=1.5.0-update13

Sun JDK=1.5.0-update8

Sun JDK=1.5.0-update10

Sun JDK=1.5.0

Sun JDK=1.6.0

Sun JRE=1.6.0-update_3

Sun JRE=1.4.2_7

Sun JRE=1.4.2_16

Sun JRE=1.4.2_4

Sun JRE=1.4.2_2

Sun JRE=1.5.0-update2

Sun JRE=1.6.0-update_1

Sun JRE=1.4.2_15

Sun JRE=1.5.0-update13

Sun JRE=1.6.0-update_2

Sun JRE=1.4.2_13

Sun JRE=1.4.2_1

Sun JRE=1.4.2_8

Sun JRE=1.5.0-update12

Sun JRE=1.5.0-update8

Sun JRE=1.4.2_12

Sun JRE=1.5.0-update11

Sun JRE=1.4.2_14

Sun JRE=1.5.0-update7

Sun JRE=1.5.0-update3

Sun JRE=1.4.2_10

Sun JRE=1.5.0-update5

Sun JRE=1.5.0-update14

Sun JRE=1.4.2_9

Sun JRE=1.4.2

Sun JRE=1.5.0-update6

Sun JRE=1.5.0-update9

Sun JRE=1.4.2_11

Sun JRE=1.5.0-update1

Sun JRE=1.5.0-update10

Sun JRE=1.6.0-update_4

Sun JRE=1.4.2_3

Sun JRE=1.5.0-update4

Sun JRE=1.4.2_5

Sun JRE=1.4.2_6

Sun JRE=1.5.0

Sun JRE=1.6.0

Sun SDK=1.4.2

Sun SDK=1.4.2_10

Sun SDK=1.4.2_12

Sun SDK=1.4.2_14

Sun SDK=1.4.2_13

Sun SDK=1.4.2_6

Sun SDK=1.4.2_2

Sun SDK=1.4.2_5

Sun SDK=1.4.2_1

Sun SDK=1.4.2_4

Sun SDK=1.4.2_7

Sun SDK=1.4.2_8

Sun SDK=1.4.2_16

Sun SDK=1.4.2_11

Sun SDK=1.4.2_9

Sun SDK=1.4.2_3

Sun SDK=1.4.2_15

Ubuntu Linux=6.06

Ubuntu Linux=7.04

Ubuntu Linux=7.10

Ubuntu Linux=6.10

Ubuntu=6.06

Ubuntu=6.10

Ubuntu=7.04

Ubuntu=7.10

Event History

Mar 6, 2008

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1195?

CVE-2008-1195 is classified with a severity level that can vary but is generally viewed as critical due to its potential for remote exploitation.

How do I fix CVE-2008-1195?

To fix CVE-2008-1195, update your Sun JDK or JRE to the latest patched version provided by Oracle.

What are the affected versions for CVE-2008-1195?

CVE-2008-1195 affects Sun JDK versions 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK and JRE 1.4.2_16 and earlier.

Can CVE-2008-1195 lead to unauthorized access?

Yes, CVE-2008-1195 allows remote attackers to access arbitrary network services on the local host, which can lead to unauthorized access.

Is there a workaround for CVE-2008-1195?

A temporary workaround for CVE-2008-1195 may include disabling Java in your browser settings until an update is applied.