CVE-2008-5352
Critical
Description
Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
SeverityCritical
CVSS9.3
Exploit probability—
ProductSun Jdk
PublishedDec 5, 2008
First seenDec 5, 2008
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun jdk | v ≤ 5.0, v ≤ 6, 5.0, 6 | — |
| sun jre | v ≤ 5.0, v ≤ 6, 5.0, 6 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.