CVE-2008-5352: Buffer Overflow
Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5352?
CVE-2008-5352 has been classified with a high severity due to its potential to allow untrusted applications to gain elevated privileges.
How do I fix CVE-2008-5352?
To fix CVE-2008-5352, upgrade to a patched version of the Java Runtime Environment that is later than Update 10 for JRE 6 or Update 16 for JDK 5.0.
Which Java versions are affected by CVE-2008-5352?
CVE-2008-5352 affects Java Runtime Environment (JRE) 6 Update 10 and earlier, and JDK 5.0 Update 16 and earlier.
What type of attack does CVE-2008-5352 enable?
CVE-2008-5352 can be exploited by attackers to execute arbitrary code with the privileges of the user running the Java application.
How can untrusted applications exploit CVE-2008-5352?
Untrusted applications can exploit CVE-2008-5352 through the unpack200 utility, allowing them to gain unauthorized privileges.