CyberSec.Space Logo
Back to CVE Browser

CVE-2008-3112

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0170%
EPSS Percentile16.65th
PublishedJul 9, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.

Affected Platforms (CPE)

📦
Sun

Jdk

<= 5.0
📦
Sun

Jdk

<= 6
📦
Sun

Jdk

= 5.0
📦
Sun

Jdk

= 5.0
📦
Sun

Jdk

= 5.0
📦
Sun

Jdk

= 5.0
📦
Sun

Jdk

= 5.0
📦
Sun

Jdk

= 5.0
📦
Sun

Jdk

= 5.0
📦
Sun

Jdk

= 5.0
📦
Sun

Jdk

= 5.0
📦
Sun

Jdk

= 5.0
📦
Sun

Jdk

= 5.0
📦
Sun

Jdk

= 5.0
📦
Sun

Jdk

= 5.0
📦
Sun

Jdk

= 6
📦
Sun

Jdk

= 6
📦
Sun

Jdk

= 6
📦
Sun

Jdk

= 6
📦
Sun

Jdk

= 6
📦
Sun

Jre

<= 1.4.2_17
📦
Sun

Jre

<= 5.0
📦
Sun

Jre

<= 6
📦
Sun

Jre

= 1.4.2
📦
Sun

Jre

= 1.4.2_01
📦
Sun

Jre

= 1.4.2_02
📦
Sun

Jre

= 1.4.2_03
📦
Sun

Jre

= 1.4.2_04
📦
Sun

Jre

= 1.4.2_05
📦
Sun

Jre

= 1.4.2_06
📦
Sun

Jre

= 1.4.2_07
📦
Sun

Jre

= 1.4.2_8
📦
Sun

Jre

= 1.4.2_9
📦
Sun

Jre

= 1.4.2_10
📦
Sun

Jre

= 1.4.2_11
📦
Sun

Jre

= 1.4.2_12
📦
Sun

Jre

= 1.4.2_13
📦
Sun

Jre

= 1.4.2_14
📦
Sun

Jre

= 1.4.2_15
📦
Sun

Jre

= 1.4.2_16
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 5.0
📦
Sun

Jre

= 6
📦
Sun

Jre

= 6
📦
Sun

Jre

= 6
📦
Sun

Jre

= 6
📦
Sun

Jre

= 6
📦
Sun

Sdk

= 1.4.2
📦
Sun

Sdk

= 1.4.2_01
📦
Sun

Sdk

= 1.4.2_02
📦
Sun

Sdk

= 1.4.2_03
📦
Sun

Sdk

= 1.4.2_04
📦
Sun

Sdk

= 1.4.2_05
📦
Sun

Sdk

= 1.4.2_06
📦
Sun

Sdk

= 1.4.2_07
📦
Sun

Sdk

= 1.4.2_08
📦
Sun

Sdk

= 1.4.2_09
📦
Sun

Sdk

= 1.4.2_10
📦
Sun

Sdk

= 1.4.2_11
📦
Sun

Sdk

= 1.4.2_12
📦
Sun

Sdk

= 1.4.2_13
📦
Sun

Sdk

= 1.4.2_14
📦
Sun

Sdk

= 1.4.2_15
📦
Sun

Sdk

= 1.4.2_16
📦
Sun

Sdk

= 1.4.2_17

References & Advisories

🔗 http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00003.html
🔗 http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
🔗 http://marc.info/?l=bugtraq&m=122331139823057&w=2
🔗 http://rhn.redhat.com/errata/RHSA-2008-0955.html

Related Vulnerabilities

CVE-2007-243510.0

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote...

CVE-2008-535310.0

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and...

CVE-2004-025310.0

IBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of service via cer...

CVE-2008-535510.0

The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 1...