CVE-2008-5359: Buffer Overflow
Published Dec 5, 2008
·Updated
Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.218 and earlier; and SDK and JRE 1.3.123 and earlier might allow remote attackers to execute arbitrary code, related to a ConvolveOp operation in the Java AWT library.
Affected Software
128 affected components
Sun Java Runtime Environment (JRE)=1.3.1
Sun Java Runtime Environment (JRE)=1.3.1_2
Sun Java Runtime Environment (JRE)=1.3.1_03
Sun Java Runtime Environment (JRE)=1.3.1_04
Sun Java Runtime Environment (JRE)=1.3.1_05
Sun Java Runtime Environment (JRE)=1.3.1_06
Sun Java Runtime Environment (JRE)=1.3.1_07
Sun Java Runtime Environment (JRE)=1.3.1_08
Sun Java Runtime Environment (JRE)=1.3.1_09
Sun Java Runtime Environment (JRE)=1.3.1_10
Sun Java Runtime Environment (JRE)=1.3.1_11
Sun Java Runtime Environment (JRE)=1.3.1_12
Sun Java Runtime Environment (JRE)=1.3.1_13
Sun Java Runtime Environment (JRE)=1.3.1_14
Sun Java Runtime Environment (JRE)=1.3.1_15
Sun Java Runtime Environment (JRE)=1.3.1_16
Sun Java Runtime Environment (JRE)=1.3.1_17
Sun Java Runtime Environment (JRE)=1.3.1_18
Sun Java Runtime Environment (JRE)=1.3.1_19
Sun Java Runtime Environment (JRE)=1.3.1_20
Sun Java Runtime Environment (JRE)=1.3.1_21
Sun Java Runtime Environment (JRE)=1.3.1_22
Sun Java Runtime Environment (JRE)=1.3.1_23
Sun Java Runtime Environment (JRE)=1.4.2
Sun Java Runtime Environment (JRE)=1.4.2_1
Sun Java Runtime Environment (JRE)=1.4.2_2
Sun Java Runtime Environment (JRE)=1.4.2_3
Sun Java Runtime Environment (JRE)=1.4.2_4
Sun Java Runtime Environment (JRE)=1.4.2_5
Sun Java Runtime Environment (JRE)=1.4.2_6
Sun Java Runtime Environment (JRE)=1.4.2_7
Sun Java Runtime Environment (JRE)=1.4.2_8
Sun Java Runtime Environment (JRE)=1.4.2_9
Sun Java Runtime Environment (JRE)=1.4.2_10
Sun Java Runtime Environment (JRE)=1.4.2_11
Sun Java Runtime Environment (JRE)=1.4.2_12
Sun Java Runtime Environment (JRE)=1.4.2_13
Sun Java Runtime Environment (JRE)=1.4.2_14
Sun Java Runtime Environment (JRE)=1.4.2_15
Sun Java Runtime Environment (JRE)=1.4.2_16
Sun Java Runtime Environment (JRE)=1.4.2_17
Sun Java Runtime Environment (JRE)=1.4.2_18
Sun Java Runtime Environment (JRE)=1.5.0
Sun Java Runtime Environment (JRE)=1.5.0-update1
Sun Java Runtime Environment (JRE)=1.5.0-update10
Sun Java Runtime Environment (JRE)=1.5.0-update11
Sun Java Runtime Environment (JRE)=1.5.0-update12
Sun Java Runtime Environment (JRE)=1.5.0-update13
Sun Java Runtime Environment (JRE)=1.5.0-update14
Sun Java Runtime Environment (JRE)=1.5.0-update15
Sun Java Runtime Environment (JRE)=1.5.0-update16
Sun Java Runtime Environment (JRE)=1.5.0-update2
Sun Java Runtime Environment (JRE)=1.6.0
Sun Java Runtime Environment (JRE)=1.6.0-update_1
Sun Java Runtime Environment (JRE)=1.6.0-update_10
Sun Java Runtime Environment (JRE)=1.6.0-update_2
Sun Java Runtime Environment (JRE)=1.6.0-update_3
Sun Java Runtime Environment (JRE)=1.6.0-update_4
Sun Java Runtime Environment (JRE)=1.6.0-update_5
Sun Java Runtime Environment (JRE)=1.6.0-update_6
Java Development Kit (JDK)=1.5.0
Java Development Kit (JDK)=1.5.0-update1
Java Development Kit (JDK)=1.5.0-update10
Java Development Kit (JDK)=1.5.0-update2
Java Development Kit (JDK)=1.5.0-update3
Java Development Kit (JDK)=1.5.0-update4
Java Development Kit (JDK)=1.5.0-update5
Java Development Kit (JDK)=1.5.0-update6
Java Development Kit (JDK)=1.5.0-update7
Java Development Kit (JDK)=1.5.0-update7_b03
Java Development Kit (JDK)=1.5.0-update8
Java Development Kit (JDK)=1.5.0-update9
Java Development Kit (JDK)=1.6.0
Java Development Kit (JDK)=1.6.0-update_10
Java Development Kit (JDK)=1.6.0-update_3
Java Development Kit (JDK)=1.6.0-update_4
Java Development Kit (JDK)=1.6.0-update_5
Java Development Kit (JDK)=1.6.0-update_6
Java Development Kit (JDK)=1.6.0-update_7
Sun SDK=1.3.1
Sun SDK=1.3.1_01
Sun SDK=1.3.1_01a
Sun SDK=1.3.1_02
Sun SDK=1.3.1_03
Sun SDK=1.3.1_04
Sun SDK=1.3.1_05
Sun SDK=1.3.1_06
Sun SDK=1.3.1_07
Sun SDK=1.3.1_08
Sun SDK=1.3.1_09
Sun SDK=1.3.1_10
Sun SDK=1.3.1_11
Sun SDK=1.3.1_12
Sun SDK=1.3.1_13
Sun SDK=1.3.1_14
Sun SDK=1.3.1_15
Sun SDK=1.3.1_16
Sun SDK=1.3.1_17
Sun SDK=1.3.1_18
Sun SDK=1.3.1_19
Sun SDK=1.3.1_20
Sun SDK=1.3.1_21
Sun SDK=1.3.1_22
Sun SDK=1.3.1_23
Sun SDK=1.4.2
Sun SDK=1.4.2_1
Sun SDK=1.4.2_2
Sun SDK=1.4.2_02
Sun SDK=1.4.2_03
Sun SDK=1.4.2_3
Sun SDK=1.4.2_04
Sun SDK=1.4.2_4
Sun SDK=1.4.2_5
Sun SDK=1.4.2_6
Sun SDK=1.4.2_7
Sun SDK=1.4.2_8
Sun SDK=1.4.2_08
Sun SDK=1.4.2_09
Sun SDK=1.4.2_9
Sun SDK=1.4.2_10
Sun SDK=1.4.2_11
Sun SDK=1.4.2_12
Sun SDK=1.4.2_13
Sun SDK=1.4.2_14
Sun SDK=1.4.2_15
Sun SDK=1.4.2_16
Sun SDK=1.4.2_17
Sun SDK=1.4.2_18
Remediation
Event History
Dec 5, 2008
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5359?
CVE-2008-5359 has a high severity rating due to its potential to allow remote attackers to execute arbitrary code through a buffer overflow.
2
How do I fix CVE-2008-5359?
To fix CVE-2008-5359, upgrade to a later version of the Java Runtime Environment that is not affected by this vulnerability.
3
Which software is affected by CVE-2008-5359?
CVE-2008-5359 affects several versions of Sun JDK and JRE, including 6 Update 10 and earlier, 5.0 Update 16 and earlier, and 1.4.2_18 and earlier.
4
Can CVE-2008-5359 be exploited remotely?
Yes, CVE-2008-5359 can be exploited remotely by attackers, particularly through maliciously crafted images or data processed by the Java Runtime Environment.
5
Is there a known fix or patch for CVE-2008-5359?
Yes, Sun Microsystems has released patches for affected JDK and JRE versions to address CVE-2008-5359.