CVE-2008-1186

CRITICAL 9.3CVE-2008-1186 · Published 06/03/2008 · updated 16/06/2026

In short

CVE-2008-1186 is a CRITICAL (CVSS 9.3) vulnerability affecting jdk (sun), jre (sun), sdk (sun).
Chance of exploitation in the next 30 days (EPSS): 5.6%, higher than 92.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jdk sun	`= 1.5.0`	No fix yet
jre sun	`= 1.4.2= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9= 1.5.0`	No fix yet
sdk sun	`= 1.4.2= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9`	No fix yet

Description

Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.2_16 and earlier, allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1185, aka "the second issue."

References

lists.apple.com/archives/security-announce//2008/Sep/msg00008.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html · Mailing List
secunia.com/advisories/29239 · Third Party Advisory
secunia.com/advisories/29273 · Third Party Advisory
secunia.com/advisories/29582 · Third Party Advisory
secunia.com/advisories/29858 · Third Party Advisory
secunia.com/advisories/30676 · Third Party Advisory
secunia.com/advisories/30780 · Third Party Advisory
secunia.com/advisories/32018 · Third Party Advisory
security.gentoo.org/glsa/glsa-200804-28.xml · Third Party Advisory
securitytracker.com/id · Third Party Advisory
sunsolve.sun.com/search/document.do · Patch

More vulnerabilities in jdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jdk

sun

= 1.5.0

No fix yet

jre

sun

= 1.4.2= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9= 1.5.0

No fix yet

sdk

sun

= 1.4.2= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9

No fix yet

Description

More vulnerabilities in jdk

See all →