Description
Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted (1) application or (2) applet, a different vulnerability than CVE-2008-3105.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | java-1.5.0-ibm +7 | 1:1.5.0.8-1jpp.1.el5 | RHSA-2008:0790 |
| RHEL 5 | java-1.6.0-ibm +7 | 1:1.6.0.2-1jpp.2.el5 | RHSA-2008:0906 |
| RHEL 5 | java-1.6.0-sun +5 | 1:1.6.0.7-1jpp.1.el5 | RHSA-2008:0594 |
| RHEL 4 | java-1.5.0-ibm +6 | 1:1.5.0.8-1jpp.1.el4 | RHSA-2008:0790 |
| RHEL 4 | java-1.6.0-ibm +6 | 1:1.6.0.2-1jpp.2.el4 | RHSA-2008:0906 |
| RHEL 4 | java-1.6.0-sun +5 | 1:1.6.0.7-1jpp.2.el4 | RHSA-2008:0594 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Network Satellite 5 | java-1.5.0-ibm +1 | 1:1.5.0.8-1jpp.1.el4 | RHSA-2008:0638 |
Advisories 4
- RHSA-2008:0906 Red Hat Security Advisory: java-1.6.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0790 Red Hat Security Advisory: java-1.5.0-ibm security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0638 Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0594 Red Hat Security Advisory: java-1.6.0-sun security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2008:1044 vendor-advisory
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and mailing-list
- oval:org.mitre.oval:def:10866 vdb-entry signature
- 32436 third-party-advisory
- 1020457 vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm
- http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm
- 31600 third-party-advisory
- SUSE-SA:2008:042 vendor-advisory
- 32018 third-party-advisory
- GLSA-200911-02 vendor-advisory
- 32179 third-party-advisory
- ADV-2008-2740 vdb-entry
- 31320 third-party-advisory
- SUSE-SA:2008:043 vendor-advisory
- APPLE-SA-2008-09-24 vendor-advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717
- 33237 third-party-advisory
- ADV-2008-2056 vdb-entry
- 32180 third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2008-0016.html
- 31736 third-party-advisory
- 30143 vdb-entry
- RHSA-2008:0594 vendor-advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014
- 31497 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm
- 238628 vendor-advisory
- RHSA-2008:1045 vendor-advisory
- 33238 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2008-299.htm
- 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues mailing-list
- SUSE-SA:2008:045 vendor-advisory
- RHSA-2008:0790 vendor-advisory
- RHSA-2008:0906 vendor-advisory
- TA08-193A third-party-advisory
- 37386 third-party-advisory
- http://support.apple.com/kb/HT3179
- sun-jre-xml-unauth-access(43658) vdb-entry
- 31010 third-party-advisory