CVE-2008-5358

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.

Affected products

Hp-Ux, Java Platform, Java Runtime Environment

Sun Jdk

≤ 6

Sun Jre

≤ 6

Fix

Available

CVSS 2.0

9.3 HIGH

EPSS

7.5% (94th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2008-12-05