CVE-2008-5340 in SDKJDK

Summary

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications via unknown vectors, aka 6727081.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 12/04/2008
• Disclosure: 12/05/2008
• Moderation: VulDB entry created
• Entries: 1: VDB-45300
• CPE: ready
• CWE: CWE-264 (Confirmed)
• Exploit: Download
• CVSS: 10.0
• EPSS: 0.04012
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-5340
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-5340
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-5340/