CVE-2008-3108

Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allows context-dependent attackers to gain privileges via unspecified vectors related to font processing.

Link	Resource
http://sunsolve.sun.com/search/document.do?assetkey=1-66-238666-1	Broken Link
http://www.securityfocus.com/bid/30147	Third Party Advisory VDB Entry
http://secunia.com/advisories/31010	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0790.html	Third Party Advisory
http://secunia.com/advisories/31320	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html	Mailing List Third Party Advisory
http://secunia.com/advisories/31497	Third Party Advisory
http://secunia.com/advisories/31600	Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA08-193A.html	Third Party Advisory US Government Resource
http://support.apple.com/kb/HT3178	Third Party Advisory
http://secunia.com/advisories/32018	Third Party Advisory
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html	Mailing List Third Party Advisory
http://support.apple.com/kb/HT3179	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html	Mailing List Third Party Advisory
http://secunia.com/advisories/32180	Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2008-0016.html	Third Party Advisory
http://marc.info/?l=bugtraq&m=122331139823057&w=2	Mailing List Third Party Advisory
http://secunia.com/advisories/32179	Third Party Advisory
http://www.securitytracker.com/id?1020461	Third Party Advisory VDB Entry
http://www.redhat.com/support/errata/RHSA-2008-1044.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-1043.html	Third Party Advisory
http://secunia.com/advisories/33237	Third Party Advisory
http://secunia.com/advisories/33236	Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm	Third Party Advisory
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717	Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-300.htm	Third Party Advisory
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200911-02.xml	Third Party Advisory
http://secunia.com/advisories/37386	Third Party Advisory
http://www.vupen.com/english/advisories/2008/2056/references	Third Party Advisory
http://www.vupen.com/english/advisories/2008/2740	Third Party Advisory
http://secunia.com/advisories/31736	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43656	VDB Entry
http://www.securityfocus.com/archive/1/497041/100/0/threaded	Third Party Advisory VDB Entry

Configuration 1

cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update7_b03:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_04:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_09:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_08:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*

---

Published : 2008-07-09 11:41

Updated : 2019-07-31 12:47

---

NVD link : CVE-2008-3108

Mitre link : CVE-2008-3108

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer