CVE-2008-1188

Impact:
Critical
Public Date:
2008-03-06
Bugzilla:
436293: CVE-2008-1188 Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190)

The MITRE CVE dictionary describes this issue as:

Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with (1) a long key name in the xml header or (2) a long charset value, different issues than CVE-2008-1189, aka "The first two issues."

Find out more about CVE-2008-1188 from the MITRE CVE dictionary dictionary and NIST NVD.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux Supplementary 5 (java-1.6.0-ibm) RHSA-2008:0267 2008-05-19
Red Hat Enterprise Linux Supplementary 5 (java-1.5.0-ibm) RHSA-2008:0210 2008-04-03
Red Hat Enterprise Linux AS version 4 Extras (java-1.5.0-ibm) RHSA-2008:0210 2008-04-03
Red Hat Enterprise Linux AS version 4 Extras (java-1.5.0-sun) RHSA-2008:0186 2008-03-06
Red Hat Enterprise Linux Supplementary 5 (java-1.5.0-sun) RHSA-2008:0186 2008-03-06
Red Hat Satellite 5.1 (RHEL v.4 AS) (java-1.5.0-ibm) RHSA-2008:0638 2008-08-13

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.