Vulnerability in Java Web Start and Plug-in Affecting Sun JDK and JRE
CVE-2008-5340

Currently unrated

Key Information:

Vendor
Oracle
Status
Vendor
CVE Published:
5 December 2008

Summary

An unspecified vulnerability in Java Web Start (JWS) and the Java Plug-in allows untrusted JWS applications to gain unauthorized privileges, enabling potential access to local files or applications via unknown vectors. This flaw poses significant risks as it can be exploited to compromise the confidentiality and integrity of files on affected systems. Users are advised to ensure their Java installations are updated to the latest versions to mitigate this risk.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.