Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16…

Description

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections via unknown vectors related to applet classloading, aka 6716217.

Scores

EPSS (exploitation in 30 days)

3.4% · top 11% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (32)

• 50513 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• SSRT090049 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• SUSE-SA:2009:018 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• ADV-2009-0672 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• RHSA-2008:1018 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• 33015 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm (opens in a new tab)x_refsource_CONFIRMx_transferred
• 34889 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 34233 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• GLSA-200911-02 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://support.avaya.com/elmodocs2/security/ASA-2008-486.htm (opens in a new tab)x_refsource_CONFIRMx_transferred
• SUSE-SA:2009:007 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• SSRT080111 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 38539 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• jre-appletclass-security-bypass(47057) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 35065 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 33528 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• RHSA-2008:1025 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• ADV-2008-3339 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• RHSA-2009:0445 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2009:0016 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• TA08-340A (opens in a new tab)third-party-advisoryx_refsource_CERTx_transferred
• http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid= (opens in a new tab)x_refsource_CONFIRMx_transferred
• 34605 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• SUSE-SR:2009:010 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• RHSA-2009:0015 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• 32991 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 244988 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
• 37386 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 33710 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• oval:org.mitre.oval:def:6249 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2008-5344](https://trackcve.app/badge/CVE-2008-5344.svg)](https://trackcve.app/cve/CVE-2008-5344)

Record last updated 7 Aug 2024, 10:49 UTC.