CVE-2008-5352

Table of Contents

Impact:
Critical
Public Date:
2008-12-04
Bugzilla:
472233: CVE-2008-5352 OpenJDK Jar200 Decompression buffer overflow (6755943)

The MITRE CVE dictionary describes this issue as:

Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JAR file that triggers a heap-based buffer overflow.

Find out more about CVE-2008-5352 from the MITRE CVE dictionary dictionary and NIST NVD.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux AS version 4 Extras (java-1.6.0-ibm) RHSA-2009:0015 2009-01-13
Red Hat Enterprise Linux AS version 4 Extras (java-1.6.0-sun) RHSA-2008:1018 2008-12-04
Red Hat Enterprise Linux Supplementary 5 (java-1.6.0-sun) RHSA-2008:1018 2008-12-04
Red Hat Enterprise Linux AS version 4 Extras (java-1.5.0-sun) RHSA-2008:1025 2008-12-04
Red Hat Enterprise Linux AS version 4 Extras (java-1.5.0-ibm) RHSA-2009:0016 2009-01-13
Red Hat Enterprise Linux Supplementary 5 (java-1.5.0-sun) RHSA-2008:1025 2008-12-04
Red Hat Satellite 5.2 (RHEL v.5) (java-1.5.0-ibm) RHSA-2009:0466 2009-05-07
Red Hat Enterprise Linux Supplementary 5 (java-1.5.0-ibm) RHSA-2009:0016 2009-01-13
Red Hat Enterprise Linux Supplementary 5 (java-1.6.0-ibm) RHSA-2009:0015 2009-01-13
Red Hat Satellite 5.2 (RHEL v.4 AS) (java-1.5.0-ibm) RHSA-2009:0466 2009-05-07
Last Modified

CVE description copyright © 2017, The MITRE Corporation