CVE-2008-3104

Currently unrated

Key Information:

Vendor
Oracle
Status
Sdk
Jdk
Jre
Vendor
CVE Published:
9 July 2008

Summary

Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allow remote attackers to violate the security model for an applet's outbound connections by connecting to localhost services running on the machine that loaded the applet.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/43662
vdb-entryx_refsource_XF
http://www.redhat.com/support/errata/RHSA-2008-1044.html
vendor-advisoryx_refsource_REDHAT
http://lists.apple.com/archives/security-announce//2008/S...
vendor-advisoryx_refsource_APPLE

EPSS Score

26% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.