CVE-2008-3108

NGHIÊM TRỌNG 10.0CVE-2008-3108 · Công bố 09/07/2008 · cập nhật 16/06/2026

Tóm tắt nhanh

CVE-2008-3108 là lỗ hổng mức NGHIÊM TRỌNG (CVSS 10.0) ảnh hưởng jdk (sun), jre (sun), sdk (sun).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 4.6%, cao hơn 91.7% các lỗ hổng khác.
Chưa có phiên bản vá trong dữ liệu: theo dõi khuyến cáo của nhà cung cấp ở phần Tham khảo.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
jdk sun	`= 1.5.0`	Chưa có bản vá
jre sun	`= 1.3.1= 1.3.1_03= 1.3.1_04= 1.3.1_05= 1.3.1_06= 1.3.1_07= 1.3.1_08= 1.3.1_09= 1.3.1_10= 1.3.1_11= 1.3.1_12= 1.3.1_13= 1.3.1_14= 1.3.1_15= 1.3.1_16= 1.3.1_17= 1.3.1_18= 1.3.1_19= 1.3.1_2= 1.3.1_20= 1.3.1_21= 1.3.1_22= 1.3.1_23= 1.4.2= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_17= 1.4.2_18= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9= 1.5.0`	Chưa có bản vá
sdk sun	`= 1.3.1= 1.3.1_01= 1.3.1_01a= 1.3.1_02= 1.3.1_03= 1.3.1_04= 1.3.1_05= 1.3.1_06= 1.3.1_07= 1.3.1_08= 1.3.1_09= 1.3.1_10= 1.3.1_11= 1.3.1_12= 1.3.1_13= 1.3.1_14= 1.3.1_15= 1.3.1_16= 1.3.1_17= 1.3.1_18= 1.3.1_19= 1.3.1_20= 1.3.1_21= 1.3.1_22= 1.3.1_23= 1.4.2= 1.4.2_02= 1.4.2_03= 1.4.2_04= 1.4.2_08= 1.4.2_09= 1.4.2_1= 1.4.2_10= 1.4.2_11= 1.4.2_12= 1.4.2_13= 1.4.2_14= 1.4.2_15= 1.4.2_16= 1.4.2_17= 1.4.2_18= 1.4.2_2= 1.4.2_3= 1.4.2_4= 1.4.2_5= 1.4.2_6= 1.4.2_7= 1.4.2_8= 1.4.2_9`	Chưa có bản vá

Mô tả

Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allows context-dependent attackers to gain privileges via unspecified vectors related to font processing.

Tham khảo

lists.apple.com/archives/security-announce//2008/Sep/msg00008.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html · Mailing List
marc.info · Mailing List
secunia.com/advisories/31010 · Third Party Advisory
secunia.com/advisories/31320 · Third Party Advisory
secunia.com/advisories/31497 · Third Party Advisory
secunia.com/advisories/31600 · Third Party Advisory
secunia.com/advisories/31736 · Third Party Advisory
secunia.com/advisories/32018 · Third Party Advisory
secunia.com/advisories/32179 · Third Party Advisory
secunia.com/advisories/32180 · Third Party Advisory
secunia.com/advisories/33236 · Third Party Advisory
secunia.com/advisories/33237 · Third Party Advisory
secunia.com/advisories/37386 · Third Party Advisory
security.gentoo.org/glsa/glsa-200911-02.xml · Third Party Advisory
sunsolve.sun.com/search/document.do · Broken Link
support.apple.com/kb/HT3178 · Third Party Advisory
support.apple.com/kb/HT3179 · Third Party Advisory
support.avaya.com/elmodocs2/security/ASA-2008-300.htm · Third Party Advisory
support.avaya.com/elmodocs2/security/ASA-2008-507.htm · Third Party Advisory
support.nortel.com/go/main.jsp · Third Party Advisory
support.nortel.com/go/main.jsp · Third Party Advisory
redhat.com/support/errata/RHSA-2008-0790.html · Third Party Advisory
redhat.com/support/errata/RHSA-2008-1043.html · Third Party Advisory
redhat.com/support/errata/RHSA-2008-1044.html · Third Party Advisory
securityfocus.com/archive/1/497041/100/0/threaded · Third Party Advisory
securityfocus.com/bid/30147 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
us-cert.gov/cas/techalerts/TA08-193A.html · Third Party Advisory
vmware.com/security/advisories/VMSA-2008-0016.html · Third Party Advisory
vupen.com/english/advisories/2008/2056/references · Third Party Advisory
vupen.com/english/advisories/2008/2740 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/43656 · VDB Entry

Lỗ hổng khác của jdk

Xem tất cả →

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí