CVE-2008-1190

CRITICAL 9.3CVE-2008-1190 · Published 06/03/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
jdk sun	`= 1.5.0= 1.6.0`	No fix yet
jre sun	`= 1.4.2= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9= 1.5.0= 1.6.0`	No fix yet
sdk sun	`= 1.4.2= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9`	No fix yet

Description

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application, a different issue than CVE-2008-1191, aka the "fourth" issue.

References

lists.apple.com/archives/security-announce//2008/Sep/msg00008.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html · Mailing List
secunia.com/advisories/29239 · Third Party Advisory
secunia.com/advisories/29273 · Third Party Advisory
secunia.com/advisories/29498 · Third Party Advisory
secunia.com/advisories/29582 · Third Party Advisory
secunia.com/advisories/29858 · Third Party Advisory
secunia.com/advisories/29897 · Third Party Advisory
secunia.com/advisories/30676 · Third Party Advisory
secunia.com/advisories/30780 · Third Party Advisory
secunia.com/advisories/31497 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free