Back to search
CVE-2008-5355
Published: Dec 5, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to execute arbitrary code via DNS man-in-the-middle attacks.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
1021315
vdb-entry
x_refsource_SECTRACK
oval:org.mitre.oval:def:5664
vdb-entry
signature
x_refsource_OVAL
GLSA-200911-02
vendor-advisory
x_refsource_GENTOO
244989
vendor-advisory
x_refsource_SUNALERT
ADV-2008-3339
vdb-entry
x_refsource_VUPEN
50498
vdb-entry
x_refsource_OSVDB
TA08-340A
third-party-advisory
x_refsource_CERT
37386
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now