CVE-2008-2086

Impact:
Important
Public Date:
2008-12-04
Bugzilla:
474556: CVE-2008-2086 Java Web Start File Inclusion via System Properties Override

The MITRE CVE dictionary describes this issue as:

Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.

Find out more about CVE-2008-2086 from the MITRE CVE dictionary dictionary and NIST NVD.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux Supplementary 5 (java-1.4.2-ibm) RHSA-2009:0445 2009-04-23
Red Hat Enterprise Linux AS version 4 Extras (java-1.6.0-ibm) RHSA-2009:0015 2009-01-13
Red Hat Enterprise Linux AS version 4 Extras (java-1.6.0-sun) RHSA-2008:1018 2008-12-04
Red Hat Enterprise Linux Supplementary 5 (java-1.6.0-sun) RHSA-2008:1018 2008-12-04
Red Hat Enterprise Linux AS version 4 Extras (java-1.5.0-sun) RHSA-2008:1025 2008-12-04
Red Hat Enterprise Linux AS version 4 Extras (java-1.5.0-ibm) RHSA-2009:0016 2009-01-13
Red Hat Enterprise Linux Supplementary 5 (java-1.5.0-sun) RHSA-2008:1025 2008-12-04
Red Hat Satellite 5.1 (RHEL v.4 AS) (java-1.5.0-sun) RHSA-2009:1662 2009-12-11
Red Hat Enterprise Linux AS version 4 Extras (java-1.4.2-ibm) RHSA-2009:0445 2009-04-23
Red Hat Enterprise Linux AS version 3 Extras (java-1.4.2-ibm) RHSA-2009:0445 2009-04-23
Red Hat Enterprise Linux Supplementary 5 (java-1.5.0-ibm) RHSA-2009:0016 2009-01-13
Red Hat Enterprise Linux Supplementary 5 (java-1.6.0-ibm) RHSA-2009:0015 2009-01-13
Last Modified

CVE description copyright © 2017, The MITRE Corporation