CVE-2008-3109

no score yetEPSS 3.5%

Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.

EPSS: 3.5% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2008-07-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sun:jdk
sun:jre

References

http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
http://marc.info/?l=bugtraq&m=122331139823057&w=2
http://secunia.com/advisories/31010
http://secunia.com/advisories/31600

Check your stack JSON