Heap-based Buffer Overflow in Java Runtime Environment by Sun Microsystems
CVE-2008-5356

Currently unrated

Key Information:

Vendor: Oracle
Status: Jdk; Jre; Sdk
Vendor: CVE Published:; 5 December 2008

What is CVE-2008-5356?

The Java Runtime Environment (JRE) from Sun Microsystems is susceptible to a heap-based buffer overflow vulnerability that can be exploited by attackers through a maliciously crafted TrueType font file. This vulnerability affects several versions of JRE and may allow unauthorized access to execute arbitrary code on the affected systems, increasing the risk of further exploitation and damaging attacks.