CVE-2008-0657
Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update...
10.0 HighFix available
Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
Exploit likelihood
2.84%Up 0.2 points since Feb 4, 2022
What each source reports
NVD Score used
Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
- Record
CVE-2008-0657- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
- Record
CVE-2008-0657- Updated
- 2026-11-02
EUVDEUVD-2008-0667 No score
Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
- Record
EUVD-2008-0667- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2jgq-w4vv-qrcg No score
Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update...
Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
- Record
GHSA-2jgq-w4vv-qrcg- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.5.0-sunRed Hat:rhel_extras:4 |
before 0:1.5.0.14-1jpp.2.el4 | 0:1.5.0.14-1jpp.2.el4 |
java-1.5.0-sun-demoRed Hat:rhel_extras:4 |
before 0:1.5.0.14-1jpp.2.el4 | 0:1.5.0.14-1jpp.2.el4 |
java-1.5.0-sun-develRed Hat:rhel_extras:4 |
before 0:1.5.0.14-1jpp.2.el4 | 0:1.5.0.14-1jpp.2.el4 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:4 |
before 0:1.5.0.14-1jpp.2.el4 | 0:1.5.0.14-1jpp.2.el4 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:4 |
before 0:1.5.0.14-1jpp.2.el4 | 0:1.5.0.14-1jpp.2.el4 |
java-1.5.0-sun-srcRed Hat:rhel_extras:4 |
before 0:1.5.0.14-1jpp.2.el4 | 0:1.5.0.14-1jpp.2.el4 |
java-1.5.0-sunRed Hat:rhel_extras:5::client |
before 0:1.5.0.14-1jpp.2.el5 | 0:1.5.0.14-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::client |
before 0:1.5.0.14-1jpp.2.el5 | 0:1.5.0.14-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::client |
before 0:1.5.0.14-1jpp.2.el5 | 0:1.5.0.14-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 0:1.5.0.14-1jpp.2.el5 | 0:1.5.0.14-1jpp.2.el5 |
Show 39 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::client |
before 0:1.5.0.14-1jpp.2.el5 | 0:1.5.0.14-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::client |
before 0:1.5.0.14-1jpp.2.el5 | 0:1.5.0.14-1jpp.2.el5 |
java-1.5.0-sunRed Hat:rhel_extras:5::server |
before 0:1.5.0.14-1jpp.2.el5 | 0:1.5.0.14-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::server |
before 0:1.5.0.14-1jpp.2.el5 | 0:1.5.0.14-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::server |
before 0:1.5.0.14-1jpp.2.el5 | 0:1.5.0.14-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 0:1.5.0.14-1jpp.2.el5 | 0:1.5.0.14-1jpp.2.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::server |
before 0:1.5.0.14-1jpp.2.el5 | 0:1.5.0.14-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::server |
before 0:1.5.0.14-1jpp.2.el5 | 0:1.5.0.14-1jpp.2.el5 |
java-1.5.0-beaRed Hat:rhel_extras:5::server From an advisory covering 5 CVEs |
before 0:1.5.0.14-1jpp.1.el5 | 0:1.5.0.14-1jpp.1.el5 |
java-1.5.0-bea-demoRed Hat:rhel_extras:5::server From an advisory covering 5 CVEs |
before 0:1.5.0.14-1jpp.1.el5 | 0:1.5.0.14-1jpp.1.el5 |
java-1.5.0-bea-develRed Hat:rhel_extras:5::server From an advisory covering 5 CVEs |
before 0:1.5.0.14-1jpp.1.el5 | 0:1.5.0.14-1jpp.1.el5 |
java-1.5.0-bea-jdbcRed Hat:rhel_extras:5::server From an advisory covering 5 CVEs |
before 0:1.5.0.14-1jpp.1.el5 | 0:1.5.0.14-1jpp.1.el5 |
java-1.5.0-bea-missioncontrolRed Hat:rhel_extras:5::server From an advisory covering 5 CVEs |
before 0:1.5.0.14-1jpp.1.el5 | 0:1.5.0.14-1jpp.1.el5 |
java-1.5.0-bea-srcRed Hat:rhel_extras:5::server From an advisory covering 5 CVEs |
before 0:1.5.0.14-1jpp.1.el5 | 0:1.5.0.14-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el4 | 1:1.5.0.7-1jpp.2.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el4 | 1:1.5.0.7-1jpp.2.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el4 | 1:1.5.0.7-1jpp.2.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el4 | 1:1.5.0.7-1jpp.2.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el4 | 1:1.5.0.7-1jpp.2.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el4 | 1:1.5.0.7-1jpp.2.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el4 | 1:1.5.0.7-1jpp.2.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 10 CVEs |
before 1:1.5.0.7-1jpp.2.el5 | 1:1.5.0.7-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:network_satellite:5.1::el4 From an advisory covering 17 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-develRed Hat:network_satellite:5.1::el4 From an advisory covering 17 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0657 is a high vulnerability (CVSS 10.0) in Sun Jdk, published February 7, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.84%, the 86th percentile. Fixed in java-1.5.0-sun 0:1.5.0.14-1jpp.2.el4.
References
secunia.com/advisories/30676
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11505
securityfocus.com/bid/27650
Show 113 moreShow less
dev2dev.bea.com/pub/advisory/277
security.gentoo.org/glsa/glsa-200804-28.xml
vupen.com/english/advisories/2008/0429
sunsolve.sun.com/search/document.do?assetkey=1-26-231261-1
securitytracker.com/id?1019308
lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
redhat.com/support/errata/RHSA-2008-0156.html
vmware.com/security/advisories/VMSA-2008-0010.html
gentoo.org/security/en/glsa/glsa-200804-20.xml
nvd.nist.gov/vuln/detail/CVE-2008-0657
github.com/advisories/GHSA-2jgq-w4vv-qrcg
access.redhat.com/errata/RHSA-2008:0123
bugzilla.redhat.com/show_bug.cgi?id=431861
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0123.json
cve.org/CVERecord?id=CVE-2008-0657