CVE-2008-5340 : Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications via unknown vectors, aka 6727081.

Published 2008-12-05 11:30:00

Updated 2017-09-29 01:32:35

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2008-5340

SUN » JDK » Update Update 10
Versions up to, including, (<=) 6
cpe:2.3:a:sun:jdk:*:update_10:*:*:*:*:*:*
Matching versions
SUN » JDK » Update Update 16
Versions up to, including, (<=) 5.0
cpe:2.3:a:sun:jdk:*:update_16:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 1
cpe:2.3:a:sun:jdk:6:update_1:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6
cpe:2.3:a:sun:jdk:6:*:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 3
cpe:2.3:a:sun:jdk:6:update_3:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 3
cpe:2.3:a:sun:jdk:5.0:update_3:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 4
cpe:2.3:a:sun:jdk:5.0:update_4:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 5
cpe:2.3:a:sun:jdk:5.0:update_5:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 1
cpe:2.3:a:sun:jdk:5.0:update_1:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 10
cpe:2.3:a:sun:jdk:5.0:update_10:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 6
cpe:2.3:a:sun:jdk:5.0:update_6:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 7
cpe:2.3:a:sun:jdk:5.0:update_7:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 2
cpe:2.3:a:sun:jdk:6:update_2:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 13
cpe:2.3:a:sun:jdk:5.0:update_13:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 2
cpe:2.3:a:sun:jdk:5.0:update_2:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 11
cpe:2.3:a:sun:jdk:5.0:update_11:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 12
cpe:2.3:a:sun:jdk:5.0:update_12:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 8
cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 9
cpe:2.3:a:sun:jdk:5.0:update_9:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 6
cpe:2.3:a:sun:jdk:6:update_6:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 7
cpe:2.3:a:sun:jdk:6:update_7:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 8
cpe:2.3:a:sun:jdk:6:update_8:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 9
cpe:2.3:a:sun:jdk:6:update_9:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 15
cpe:2.3:a:sun:jdk:5.0:update_15:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 5
cpe:2.3:a:sun:jdk:6:update_5:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 6 Update Update 4
cpe:2.3:a:sun:jdk:6:update_4:*:*:*:*:*:*
Matching versions
SUN » JDK » Version: 5.0 Update Update 14
cpe:2.3:a:sun:jdk:5.0:update_14:*:*:*:*:*:*
Matching versions
SUN » JRE
Versions up to, including, (<=) 1.4.2_18
cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Update Update 16
Versions up to, including, (<=) 5.0
cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*
Matching versions
SUN » JRE » Update Update 10
Versions up to, including, (<=) 6
cpe:2.3:a:sun:jre:*:update_10:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 6
cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 7
cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 2
cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 3
cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 1
cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 10
cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 8
cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 9
cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 4
cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 5
cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 12
cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 13
cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 11
cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 14
cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 15
cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0
cpe:2.3:a:sun:jre:5.0:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6
cpe:2.3:a:sun:jre:6:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 1
cpe:2.3:a:sun:jre:6:update_1:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 1
cpe:2.3:a:sun:jre:5.0:update_1:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 10
cpe:2.3:a:sun:jre:5.0:update_10:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 6
cpe:2.3:a:sun:jre:5.0:update_6:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 7
cpe:2.3:a:sun:jre:5.0:update_7:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 2
cpe:2.3:a:sun:jre:6:update_2:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 3
cpe:2.3:a:sun:jre:6:update_3:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 11
cpe:2.3:a:sun:jre:5.0:update_11:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 12
cpe:2.3:a:sun:jre:5.0:update_12:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 4
cpe:2.3:a:sun:jre:5.0:update_4:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 5
cpe:2.3:a:sun:jre:5.0:update_5:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 8
cpe:2.3:a:sun:jre:5.0:update_8:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 9
cpe:2.3:a:sun:jre:5.0:update_9:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 13
cpe:2.3:a:sun:jre:5.0:update_13:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 2
cpe:2.3:a:sun:jre:5.0:update_2:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 3
cpe:2.3:a:sun:jre:5.0:update_3:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 6
cpe:2.3:a:sun:jre:6:update_6:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 7
cpe:2.3:a:sun:jre:6:update_7:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 14
cpe:2.3:a:sun:jre:5.0:update_14:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 4
cpe:2.3:a:sun:jre:6:update_4:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 17
cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 1.4.2 16
cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 5
cpe:2.3:a:sun:jre:6:update_5:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 8
cpe:2.3:a:sun:jre:6:update_8:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 6 Update Update 9
cpe:2.3:a:sun:jre:6:update_9:*:*:*:*:*:*
Matching versions
SUN » JRE » Version: 5.0 Update Update 15
cpe:2.3:a:sun:jre:5.0:update_15:*:*:*:*:*:*
Matching versions
SUN » SDK
Versions up to, including, (<=) 1.4.2_18
cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 9
cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 3
cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 8
cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 1
cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 2
cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 5
cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 6
cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 7
cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 4
cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 10
cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 11
cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 12
cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 14
cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 13
cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 15
cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 17
cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*
Matching versions
SUN » SDK » Version: 1.4.2 16
cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-5340

EPSS FAQ

1.83%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 87 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-5340

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2008-5340

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-5340

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html

[security-announce] SUSE Security Summary Report: SUSE-SR:2009:010 - openSUSE Security Announce - openSUSE Mailing Lists

CVEs referencing this url
http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf

CVEs referencing this url
http://www.redhat.com/support/errata/RHSA-2009-0445.html

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html

CVEs referencing this url
http://www.vupen.com/english/advisories/2009/0424

CVEs referencing this url
http://sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1

Patch;Vendor Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html

CVEs referencing this url
http://marc.info/?l=bugtraq&m=126583436323697&w=2

CVEs referencing this url
http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm

CVEs referencing this url
http://www.vupen.com/english/advisories/2009/0672

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2008-1018.html

CVEs referencing this url
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=

CVEs referencing this url
http://www.us-cert.gov/cas/techalerts/TA08-340A.html

US Government Resource

CVEs referencing this url
http://www.redhat.com/support/errata/RHSA-2009-0369.html

CVEs referencing this url
http://www.vupen.com/english/advisories/2008/3339

CVEs referencing this url
http://security.gentoo.org/glsa/glsa-200911-02.xml

Sun JDK/JRE: Multiple vulnerabilities (GLSA 200911-02) — Gentoo security

CVEs referencing this url
http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm

CVEs referencing this url
http://www.redhat.com/support/errata/RHSA-2009-0016.html

CVEs referencing this url
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6627
http://lists.apple.com/archives/security-announce/2009/Feb/msg00003.html

CVEs referencing this url
http://marc.info/?l=bugtraq&m=123678756409861&w=2

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2008-1025.html

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2008-5340

Products affected by CVE-2008-5340

Exploit prediction scoring system (EPSS) score for CVE-2008-5340

CVSS scores for CVE-2008-5340

CWE ids for CVE-2008-5340

References for CVE-2008-5340