Home > Vulnerability Database > CVE-2008-3109

Mend.io Vulnerability Database

CVE-2008-3109

Date: July 9, 2008

Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.

Severity Score

7.5

Related Resources (30)

Url: https://nvd.nist.gov/vuln/detail/CVE-2008-3109

Url: http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/43660

Url: http://secunia.com/advisories/37386

Url: http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html

Url: http://secunia.com/advisories/32436

Url: http://secunia.com/advisories/31600

Url: http://secunia.com/advisories/32018

Url: http://www.vmware.com/security/advisories/VMSA-2008-0016.html

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8540

Url: http://secunia.com/advisories/32179

Url: http://www.redhat.com/support/errata/RHSA-2008-0594.html

Url: http://www.vupen.com/english/advisories/2008/2056/references

Url: http://support.apple.com/kb/HT3179

Url: http://www.securityfocus.com/bid/30144

Url: http://secunia.com/advisories/32180

Url: http://www.vupen.com/english/advisories/2008/2740

Url: http://www.securitytracker.com/id?1020456

Url: http://secunia.com/advisories/31010

Url: http://www.us-cert.gov/cas/techalerts/TA08-193A.html

Url: http://security.gentoo.org/glsa/glsa-200911-02.xml

Url: http://www.redhat.com/support/errata/RHSA-2008-0906.html

Url: http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html

Url: http://sunsolve.sun.com/search/document.do?assetkey=1-66-238687-1

Url: http://secunia.com/advisories/33238

Url: http://www.securityfocus.com/archive/1/497041/100/0/threaded

Url: http://marc.info/?l=bugtraq&m=122331139823057&w=2

Url: http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm

Url: http://www.redhat.com/support/errata/RHSA-2008-1045.html

Url: https://www.mend.io/vulnerability-database/CVE-2008-3109

Severity Score

7.5

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

CVSS v3

Base Score:	7.5
Attack Vector (AV):
Attack Complexity (AC):
Privileges Required (PR):
User Interaction (UI):
Scope (S):
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL

CVSS v2

Base Score:	7.3
Access Vector (AV):
Access Complexity (AC):
Authentication (AU):
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2008-3109

Date: July 9, 2008

Severity Score

Related Resources (30)

Severity Score

Weakness Type (CWE)

CVSS v3

CVSS v2

Do you need more information?