CVEvulnerability

CVE-2008-3104

6.8 MEDIUM Published 2008-07-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-07-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allow remote attackers to violate the security model for an applet's outbound connections by connecting to localhost services running on the machine that loaded the applet.

Affected configurations

• sun jdk (<= 5.0) • sun jdk (<= 6) • sun jdk 1.5.0 • sun jdk 5.0 • sun jdk 6 • sun jre 1.3.0 • sun jre 1.3.1 • sun jre 1.3.1 02 • sun jre 1.3.1 03 • sun jre 1.3.1 04 • sun jre 1.3.1 05 • sun jre 1.3.1 06 • sun jre 1.3.1 07 • sun jre 1.3.1 08 • sun jre 1.3.1 09 • sun jre 1.3.1 10 • sun jre 1.3.1 11 • sun jre 1.3.1 12 • sun jre 1.3.1 13 • sun jre 1.3.1 14 • sun jre 1.3.1 15 • sun jre 1.3.1 17 • sun jre 1.3.1 21 • sun jre 1.3.1 22 • sun jre 1.4.2 1 • sun jre 1.4.2 2 • sun jre 1.4.2 3 • sun jre 1.4.2 4 • sun jre 1.4.2 5 • sun jre 1.4.2 6 • sun jre 1.4.2 7 • sun jre 1.4.2 8 • sun jre 1.4.2 9 • sun jre 1.4.2 10 • sun jre 1.4.2 11 • sun jre 1.4.2 12 • sun jre 1.4.2 13 • sun jre 1.4.2 14 • sun jre 1.4.2 15 • sun jre 1.4.2 16 • sun jre 1.4.2 17 • sun sdk 1.3.0 • sun sdk 1.3.1 01 • sun sdk 1.3.1 02 • sun sdk 1.3.1 03 • sun sdk 1.3.1 04 • sun sdk 1.3.1 05 • sun sdk 1.3.1 06 • sun sdk 1.3.1 07 • sun sdk 1.3.1 08 • sun sdk 1.3.1 09 • sun sdk 1.3.1 10 • sun sdk 1.3.1 11 • sun sdk 1.3.1 12 • sun sdk 1.3.1 13 • sun sdk 1.3.1 14 • sun sdk 1.3.1 15 • sun sdk 1.3.1 16 • sun sdk 1.3.1 17 • sun sdk 1.3.1 18 … and 21 more

Related

Weakness · not in database (1)

References