CVE-2008-3108

CRITICAL 10.0CVE-2008-3108 · Published 09/07/2008 · updated 16/06/2026

In short

CVE-2008-3108 is a CRITICAL (CVSS 10.0) vulnerability affecting jdk (sun), jre (sun), sdk (sun).
Chance of exploitation in the next 30 days (EPSS): 4.6%, higher than 91.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jdk sun	`= 1.5.0`	No fix yet
jre sun	`= 1.3.1= 1.3.1_03= 1.3.1_04= 1.3.1_05= 1.3.1_06= 1.3.1_07= 1.3.1_08= 1.3.1_09= 1.3.1_10= 1.3.1_11= 1.3.1_12= 1.3.1_13= 1.3.1_14= 1.3.1_15= 1.3.1_16= 1.3.1_17= 1.3.1_18= 1.3.1_19= 1.3.1_2= 1.3.1_20= 1.3.1_21= 1.3.1_22= 1.3.1_23= 1.4.2= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_17= 1.4.2_18= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9= 1.5.0`	No fix yet
sdk sun	`= 1.3.1= 1.3.1_01= 1.3.1_01a= 1.3.1_02= 1.3.1_03= 1.3.1_04= 1.3.1_05= 1.3.1_06= 1.3.1_07= 1.3.1_08= 1.3.1_09= 1.3.1_10= 1.3.1_11= 1.3.1_12= 1.3.1_13= 1.3.1_14= 1.3.1_15= 1.3.1_16= 1.3.1_17= 1.3.1_18= 1.3.1_19= 1.3.1_20= 1.3.1_21= 1.3.1_22= 1.3.1_23= 1.4.2= 1.4.2_02= 1.4.2_03= 1.4.2_04= 1.4.2_08= 1.4.2_09= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_17= 1.4.2_18= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9`	No fix yet

Description

Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allows context-dependent attackers to gain privileges via unspecified vectors related to font processing.

References

lists.apple.com/archives/security-announce//2008/Sep/msg00008.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html · Mailing List
marc.info · Mailing List
secunia.com/advisories/31010 · Third Party Advisory
secunia.com/advisories/31320 · Third Party Advisory
secunia.com/advisories/31497 · Third Party Advisory
secunia.com/advisories/31600 · Third Party Advisory
secunia.com/advisories/31736 · Third Party Advisory
secunia.com/advisories/32018 · Third Party Advisory
secunia.com/advisories/32179

More vulnerabilities in jdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jdk

sun

= 1.5.0

No fix yet

jre

sun

= 1.3.1= 1.3.1_03= 1.3.1_04= 1.3.1_05= 1.3.1_06= 1.3.1_07= 1.3.1_08= 1.3.1_09= 1.3.1_10= 1.3.1_11= 1.3.1_12= 1.3.1_13= 1.3.1_14= 1.3.1_15= 1.3.1_16= 1.3.1_17= 1.3.1_18= 1.3.1_19= 1.3.1_2= 1.3.1_20= 1.3.1_21= 1.3.1_22= 1.3.1_23= 1.4.2= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_17= 1.4.2_18= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9= 1.5.0

No fix yet

sdk

sun

= 1.3.1= 1.3.1_01= 1.3.1_01a= 1.3.1_02= 1.3.1_03= 1.3.1_04= 1.3.1_05= 1.3.1_06= 1.3.1_07= 1.3.1_08= 1.3.1_09= 1.3.1_10= 1.3.1_11= 1.3.1_12= 1.3.1_13= 1.3.1_14= 1.3.1_15= 1.3.1_16= 1.3.1_17= 1.3.1_18= 1.3.1_19= 1.3.1_20= 1.3.1_21= 1.3.1_22= 1.3.1_23= 1.4.2= 1.4.2_02= 1.4.2_03= 1.4.2_04= 1.4.2_08= 1.4.2_09= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_17= 1.4.2_18= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9

No fix yet

More vulnerabilities in jdk

See all →