CVE-2008-1195

Java-API calls in untrusted Javascript allow network privilege escalation

Published Mar 6, 2008 CVSS 2.0 · 9.3 Critical EPSS 5.7% KEV · Not listed
Description
Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Ubuntu USN Ubuntu USN USN-592-1 Firefox vulnerabilities
References
Link Providers
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html cve-icon cve-icon
http://secunia.com/advisories/29239 cve-icon cve-icon
http://secunia.com/advisories/29273 cve-icon cve-icon
http://secunia.com/advisories/29498 cve-icon cve-icon
http://secunia.com/advisories/29526 cve-icon cve-icon
http://secunia.com/advisories/29541 cve-icon cve-icon
http://secunia.com/advisories/29547 cve-icon cve-icon
http://secunia.com/advisories/29560 cve-icon cve-icon
http://secunia.com/advisories/29582 cve-icon cve-icon
http://secunia.com/advisories/29645 cve-icon cve-icon
http://secunia.com/advisories/29858 cve-icon cve-icon
http://secunia.com/advisories/29897 cve-icon cve-icon
http://secunia.com/advisories/30620 cve-icon cve-icon
http://secunia.com/advisories/30676 cve-icon cve-icon
http://secunia.com/advisories/30780 cve-icon cve-icon
http://secunia.com/advisories/31497 cve-icon cve-icon
http://secunia.com/advisories/32018 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200804-28.xml cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-233326-1 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 cve-icon cve-icon
http://support.apple.com/kb/HT3178 cve-icon cve-icon
http://support.apple.com/kb/HT3179 cve-icon cve-icon
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128 cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDVSA-2008:080 cve-icon cve-icon
http://www.mozilla.org/security/announce/2008/mfsa2008-18.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0186.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0210.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2008-0267.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/490196/100/0/threaded cve-icon cve-icon
http://www.securitytracker.com/id?1019553 cve-icon cve-icon
http://www.ubuntu.com/usn/usn-592-1 cve-icon cve-icon
http://www.us-cert.gov/cas/techalerts/TA08-066A.html cve-icon cve-icon
http://www.us-cert.gov/cas/techalerts/TA08-087A.html cve-icon cve-icon
http://www.vmware.com/security/advisories/VMSA-2008-0010.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/0770/references cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/0998/references cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/1793/references cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/1856/references cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/41030 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2008-1195 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9486 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2008-1195 cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 8:08 AM
Reserved
Mar 6, 2008, 12:00 AM
Status
Modified
Published
Mar 6, 2008, 9:44 PM
Modified
Jun 16, 2026, 10:51 PM
Severity
Critical
Public date
Mar 6, 2008, 12:00 AM