CVE-2008-5347

Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets and applications to gain privileges via vectors related to access to inner classes in the (1) JAX-WS and (2) JAXB packages.

Affected products

Hp-Ux, Java Platform, Java Runtime Environment

Sun Jdk

≤ 6

Sun Jre

≤ 6

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

3.4% (88th percentile)

Weakness

CWE-264

NVD status

Modified

Published

2008-12-05