CVE-2008-3107
Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and...
Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
- Record
CVE-2008-3107- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
- Record
CVE-2008-3107- Updated
- 2026-11-02
EUVDEUVD-2008-3097 No score
Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
- Record
EUVD-2008-3097- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-59rm-f3qj-r4jw No score
Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and...
Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
- Record
GHSA-59rm-f3qj-r4jw- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.2.el4 | 1:1.6.0.7-1jpp.2.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
Show 28 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs |
before 1:1.6.0.7-1jpp.1.el5 | 1:1.6.0.7-1jpp.1.el5 |
java-1.5.0-sunRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sunRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sunRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sunRed Hat:network_satellite:5.1::el4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-develRed Hat:network_satellite:5.1::el4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3107 is a high vulnerability (CVSS 10.0) in Sun Jdk, published July 9, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.64%, the 89th percentile. No source names a fixed version.
References
sunsolve.sun.com/search/document.do?assetkey=1-66-238967-1
exchange.xforce.ibmcloud.com/vulnerabilities/43659
lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
marc.info?l=bugtraq&m=122331139823057&w=2
securitytracker.com/id?1020455
secunia.com/advisories/31600
Show 72 moreShow less
lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
security.gentoo.org/glsa/glsa-200911-02.xml
vupen.com/english/advisories/2008/2740
securityfocus.com/bid/30141
vmware.com/security/advisories/VMSA-2008-0016.html
support.apple.com/kb/HT3178
redhat.com/support/errata/RHSA-2008-0594.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10219
us-cert.gov/cas/techalerts/TA08-193A.html
nvd.nist.gov/vuln/detail/CVE-2008-3107
github.com/advisories/GHSA-59rm-f3qj-r4jw
access.redhat.com/errata/RHSA-2008:0594
bugzilla.redhat.com/show_bug.cgi?id=452649
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0594.json
cve.org/CVERecord?id=CVE-2008-3103