CVE-2008-3105

HIGH 8.3CVE-2008-3105 · Published 09/07/2008 · updated 16/06/2026

In short

CVE-2008-3105 is a HIGH (CVSS 8.3) vulnerability affecting jdk (sun), jre (sun).
Chance of exploitation in the next 30 days (EPSS): 4.0%, higher than 90.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jdk sun	`= 6≤ 6`	No fix yet
jre sun	`= 6≤ 6`	No fix yet

Description

Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to access URLs or cause a denial of service via unknown vectors involving "processing of XML data" by a trusted application.

References

lists.apple.com/archives/security-announce//2008/Sep/msg00007.html
lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
marc.info
secunia.com/advisories/31010 · Vendor Advisory
secunia.com/advisories/31600
secunia.com/advisories/32018
secunia.com/advisories/32179
secunia.com/advisories/32180
secunia.com/advisories/32436
secunia.com/advisories/33237
secunia.com/advisories/33238
secunia.com/advisories/37386
security.gentoo.org/glsa/glsa-200911-02.xml
sunsolve.sun.com/search/document.do · Patch
support.apple.com/kb/HT3179

More vulnerabilities in jdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free