CVEvulnerability
CVE-2008-3106
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-07-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted (1) application or (2) applet, a different vulnerability than CVE-2008-3105.
Affected configurations
• sun jdk (<= 5.0)
• sun jdk (<= 6)
• sun jdk 5.0
• sun jdk 6
• sun jre (<= 5.0)
• sun jre (<= 6)
• sun jre 5.0
• sun jre 6
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=122331139823057&w=2 marc.info
- http://secunia.com/advisories/31010 Vendor Advisory
- http://secunia.com/advisories/31320 secunia.com
- http://secunia.com/advisories/31497 secunia.com
- http://secunia.com/advisories/31600 secunia.com
- http://secunia.com/advisories/31736 secunia.com
- http://secunia.com/advisories/32018 secunia.com
- http://secunia.com/advisories/32179 secunia.com
- http://secunia.com/advisories/32180 secunia.com
- http://secunia.com/advisories/32436 secunia.com
- http://secunia.com/advisories/33237 secunia.com
- http://secunia.com/advisories/33238 secunia.com
- http://secunia.com/advisories/37386 secunia.com
- http://security.gentoo.org/glsa/glsa-200911-02.xml security.gentoo.org
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-238628-1 sunsolve.sun.com
- http://support.apple.com/kb/HT3179 support.apple.com
- http://support.avaya.com/elmodocs2/security/ASA-2008-299.htm support.avaya.com
- http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm support.avaya.com
- http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm support.avaya.com
- http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm support.avaya.com
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014 support.nortel.com
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717 support.nortel.com
- http://www.redhat.com/support/errata/RHSA-2008-0594.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2008-0790.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2008-0906.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2008-1044.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2008-1045.html www.redhat.com
- http://www.securityfocus.com/archive/1/497041/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/30143 www.securityfocus.com
- http://www.securitytracker.com/id?1020457 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA08-193A.html US Government Resource
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html www.vmware.com
- http://www.vupen.com/english/advisories/2008/2056/references www.vupen.com
- http://www.vupen.com/english/advisories/2008/2740 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43658 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10866 oval.cisecurity.org
- http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html lists.opensuse.org
- http://marc.info/?l=bugtraq&m=122331139823057&w=2 marc.info
- http://secunia.com/advisories/31010 Vendor Advisory
- http://secunia.com/advisories/31320 secunia.com
- http://secunia.com/advisories/31497 secunia.com
- http://secunia.com/advisories/31600 secunia.com
- http://secunia.com/advisories/31736 secunia.com
- http://secunia.com/advisories/32018 secunia.com
- http://secunia.com/advisories/32179 secunia.com
- http://secunia.com/advisories/32180 secunia.com
- http://secunia.com/advisories/32436 secunia.com
- http://secunia.com/advisories/33237 secunia.com
- http://secunia.com/advisories/33238 secunia.com
- http://secunia.com/advisories/37386 secunia.com
- http://security.gentoo.org/glsa/glsa-200911-02.xml security.gentoo.org
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-238628-1 sunsolve.sun.com
- http://support.apple.com/kb/HT3179 support.apple.com
- http://support.avaya.com/elmodocs2/security/ASA-2008-299.htm support.avaya.com
- http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm support.avaya.com
- http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm support.avaya.com
- http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm support.avaya.com
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014 support.nortel.com
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717 support.nortel.com
- http://www.redhat.com/support/errata/RHSA-2008-0594.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2008-0790.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2008-0906.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2008-1044.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2008-1045.html www.redhat.com
- http://www.securityfocus.com/archive/1/497041/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/30143 www.securityfocus.com
- http://www.securitytracker.com/id?1020457 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA08-193A.html US Government Resource
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html www.vmware.com
- http://www.vupen.com/english/advisories/2008/2056/references www.vupen.com
- http://www.vupen.com/english/advisories/2008/2740 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43658 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10866 oval.cisecurity.org