CVE-2008-1194

JRE image parsing library allows privilege escalation (CVE-2008-1194)

Published Mar 6, 2008 CVSS 2.0 · 4.3 Medium EPSS 4.2% KEV · Not listed
Description
Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to cause a denial of service (crash) via unknown vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
References
Link Providers
http://dev2dev.bea.com/pub/advisory/277 cve-icon cve-icon
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html cve-icon cve-icon
http://secunia.com/advisories/29239 cve-icon cve-icon
http://secunia.com/advisories/29273 cve-icon cve-icon
http://secunia.com/advisories/29498 cve-icon cve-icon
http://secunia.com/advisories/29582 cve-icon cve-icon
http://secunia.com/advisories/29858 cve-icon cve-icon
http://secunia.com/advisories/29897 cve-icon cve-icon
http://secunia.com/advisories/30003 cve-icon cve-icon
http://secunia.com/advisories/30676 cve-icon cve-icon
http://secunia.com/advisories/30780 cve-icon cve-icon
http://secunia.com/advisories/31497 cve-icon cve-icon
http://secunia.com/advisories/32018 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200804-28.xml cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-233325-1 cve-icon cve-icon
http://support.apple.com/kb/HT3178 cve-icon cve-icon
http://support.apple.com/kb/HT3179 cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0186.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0210.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0244.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0245.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0267.html cve-icon cve-icon
http://www.securitytracker.com/id?1019551 cve-icon cve-icon
http://www.us-cert.gov/cas/techalerts/TA08-066A.html cve-icon cve-icon
http://www.vmware.com/security/advisories/VMSA-2008-0010.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/0770/references cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/1252 cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/1856/references cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/41132 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2008-1194 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9542 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2008-1194 cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 8:08 AM
Reserved
Mar 6, 2008, 12:00 AM
Status
Modified
Published
Mar 6, 2008, 9:44 PM
Modified
Jun 16, 2026, 10:51 PM
Severity
Critical
Public date
Mar 6, 2008, 12:00 AM