CVE-2008-3107

Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.

• CWE-264

• https://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
• https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
• https://marc.info/?l=bugtraq&m=122331139823057&w=2
• https://secunia.com/advisories/31010Vendor Advisory
• https://secunia.com/advisories/31055
• https://secunia.com/advisories/31497
• https://secunia.com/advisories/31600
• https://secunia.com/advisories/32018
• https://secunia.com/advisories/32179
• https://secunia.com/advisories/32180
• https://secunia.com/advisories/37386
• https://security.gentoo.org/glsa/glsa-200911-02.xml
• https://sunsolve.sun.com/search/document.do?assetkey=1-66-238967-1
• https://support.apple.com/kb/HT3178
• https://support.apple.com/kb/HT3179
• https://www.redhat.com/support/errata/RHSA-2008-0594.html
• https://www.redhat.com/support/errata/RHSA-2008-0595.html
• https://www.securityfocus.com/archive/1/497041/100/0/threaded
• https://www.securityfocus.com/bid/30141
• https://www.securitytracker.com/id?1020455
• https://www.us-cert.gov/cas/techalerts/TA08-193A.htmlUS Government Resource
• https://www.vmware.com/security/advisories/VMSA-2008-0016.html
• https://www.vupen.com/english/advisories/2008/2056/references
• https://www.vupen.com/english/advisories/2008/2740
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43659
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10219
• https://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
• https://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
• https://marc.info/?l=bugtraq&m=122331139823057&w=2
• https://secunia.com/advisories/31010Vendor Advisory
• https://secunia.com/advisories/31055
• https://secunia.com/advisories/31497
• https://secunia.com/advisories/31600
• https://secunia.com/advisories/32018
• https://secunia.com/advisories/32179
• https://secunia.com/advisories/32180
• https://secunia.com/advisories/37386
• https://security.gentoo.org/glsa/glsa-200911-02.xml
• https://sunsolve.sun.com/search/document.do?assetkey=1-66-238967-1
• https://support.apple.com/kb/HT3178
• https://support.apple.com/kb/HT3179
• https://www.redhat.com/support/errata/RHSA-2008-0594.html
• https://www.redhat.com/support/errata/RHSA-2008-0595.html
• https://www.securityfocus.com/archive/1/497041/100/0/threaded
• https://www.securityfocus.com/bid/30141
• https://www.securitytracker.com/id?1020455
• https://www.us-cert.gov/cas/techalerts/TA08-193A.htmlUS Government Resource
• https://www.vmware.com/security/advisories/VMSA-2008-0016.html
• https://www.vupen.com/english/advisories/2008/2056/references
• https://www.vupen.com/english/advisories/2008/2740
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43659
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10219

Published

Jul 9, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-3101Multiple cross-site scripting (XSS) vulnerabilities in vtige…
• CVE-2008-3102Mantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does no…
• CVE-2008-3103Unspecified vulnerability in the Java Management Extensions …
• CVE-2008-3104Multiple unspecified vulnerabilities in Sun Java Runtime Env…
• CVE-2008-3105Unspecified vulnerability in the JAX-WS client and service i…
• CVE-2008-3106Unspecified vulnerability in Sun Java Runtime Environment (J…
• CVE-2008-3108Buffer overflow in Sun Java Runtime Environment (JRE) in JDK…
• CVE-2008-3109Unspecified vulnerability in scripting language support in S…
• CVE-2008-3110Unspecified vulnerability in scripting language support in S…
• CVE-2008-3111Multiple buffer overflows in Sun Java Web Start in JDK and J…
• CVE-2008-3112Directory traversal vulnerability in Sun Java Web Start in J…
• CVE-2008-3113Unspecified vulnerability in Sun Java Web Start in JDK and J…