CVE-2008-0657

no score yetEPSS 2.8%

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2008-02-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sun:jdk
sun:jre

References

http://dev2dev.bea.com/pub/advisory/277
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
http://secunia.com/advisories/28795
http://secunia.com/advisories/28888
http://secunia.com/advisories/29214

Check your stack JSON