CVE-2008-1196

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.

Weaknesses (CWE)

CWE-119

Affected Products (72)

sun · jdkvulnerable

sun · jrevulnerable

...and 22 more

References (20)

http://download.novell.com/Download?buildid=q5exhSqeBjA~

Third Party Advisory

http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html

Mailing ListThird Party Advisory

http://secunia.com/advisories/29239

Third Party Advisory

http://secunia.com/advisories/29273

Third Party Advisory

http://secunia.com/advisories/29498

Third Party Advisory

http://secunia.com/advisories/29582

Third Party Advisory

http://secunia.com/advisories/29858

Third Party Advisory

http://secunia.com/advisories/29897

Third Party Advisory

http://secunia.com/advisories/30676

Third Party Advisory

http://secunia.com/advisories/30780

Third Party Advisory

http://secunia.com/advisories/31067

Third Party Advisory

http://secunia.com/advisories/31497

Third Party Advisory

http://secunia.com/advisories/31580

Third Party Advisory

http://secunia.com/advisories/31586

Third Party Advisory

http://secunia.com/advisories/32018

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200804-28.xml

Third Party Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-233327-1

PatchThird Party Advisory

http://support.apple.com/kb/HT3178

Third Party Advisory