CVE-2008-5353
CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
Affected Platforms (CPE)
📦
Sun
Jdk
<= 5.0📦
Sun
Jdk
<= 6📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 5.0📦
Sun
Jdk
= 6📦
Sun
Jdk
= 6📦
Sun
Jdk
= 6📦
Sun
Jdk
= 6📦
Sun
Jdk
= 6📦
Sun
Jdk
= 6📦
Sun
Jdk
= 6📦
Sun
Jdk
= 6📦
Sun
Jdk
= 6📦
Sun
Jdk
= 6📦
Sun
Jre
<= 1.4.2_18📦
Sun
Jre
<= 5.0📦
Sun
Jre
<= 6📦
Sun
Jre
= 1.4.2_1📦
Sun
Jre
= 1.4.2_2📦
Sun
Jre
= 1.4.2_3📦
Sun
Jre
= 1.4.2_4📦
Sun
Jre
= 1.4.2_5📦
Sun
Jre
= 1.4.2_6📦
Sun
Jre
= 1.4.2_7📦
Sun
Jre
= 1.4.2_8📦
Sun
Jre
= 1.4.2_9📦
Sun
Jre
= 1.4.2_10📦
Sun
Jre
= 1.4.2_11📦
Sun
Jre
= 1.4.2_12📦
Sun
Jre
= 1.4.2_13📦
Sun
Jre
= 1.4.2_14📦
Sun
Jre
= 1.4.2_15📦
Sun
Jre
= 1.4.2_16📦
Sun
Jre
= 1.4.2_17📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 5.0📦
Sun
Jre
= 6📦
Sun
Jre
= 6📦
Sun
Jre
= 6📦
Sun
Jre
= 6📦
Sun
Jre
= 6📦
Sun
Jre
= 6📦
Sun
Jre
= 6📦
Sun
Jre
= 6📦
Sun
Jre
= 6📦
Sun
Jre
= 6📦
Sun
Sdk
<= 1.4.2_18📦
Sun
Sdk
= 1.4.2_1📦
Sun
Sdk
= 1.4.2_2📦
Sun
Sdk
= 1.4.2_3📦
Sun
Sdk
= 1.4.2_4📦
Sun
Sdk
= 1.4.2_5📦
Sun
Sdk
= 1.4.2_6📦
Sun
Sdk
= 1.4.2_7📦
Sun
Sdk
= 1.4.2_8📦
Sun
Sdk
= 1.4.2_9📦
Sun
Sdk
= 1.4.2_10📦
Sun
Sdk
= 1.4.2_11📦
Sun
Sdk
= 1.4.2_12📦
Sun
Sdk
= 1.4.2_13📦
Sun
Sdk
= 1.4.2_14📦
Sun
Sdk
= 1.4.2_15📦
Sun
Sdk
= 1.4.2_16📦
Sun