CVE-2008-3113
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and...
10.0 High
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
Exploit likelihood
6.44%Up 2.1 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
- Record
CVE-2008-3113- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
- Record
CVE-2008-3113- Updated
- 2026-11-02
EUVDEUVD-2008-3103 No score
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
- Record
EUVD-2008-3103- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-32mg-gg62-gfq3 No score
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and...
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
- Record
GHSA-32mg-gg62-gfq3- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.5.0-sunRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sunRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
Show 62 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sunRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el5 | 0:1.5.0.16-1jpp.2.el5 |
java-1.5.0-sunRed Hat:network_satellite:5.1::el4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-sun-develRed Hat:network_satellite:5.1::el4 From an advisory covering 7 CVEs |
before 0:1.5.0.16-1jpp.2.el4 | 0:1.5.0.16-1jpp.2.el4 |
java-1.5.0-ibmRed Hat:network_satellite:5.1::el4 From an advisory covering 17 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-develRed Hat:network_satellite:5.1::el4 From an advisory covering 17 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el4 | 1:1.5.0.8-1jpp.1.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.8-1jpp.1.el5 | 1:1.5.0.8-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:3 From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el3 | 0:1.4.2.12-1jpp.1.el3 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:3 From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el3 | 0:1.4.2.12-1jpp.1.el3 |
java-1.4.2-ibm-develRed Hat:rhel_extras:3 From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el3 | 0:1.4.2.12-1jpp.1.el3 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:3 From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el3 | 0:1.4.2.12-1jpp.1.el3 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:3 From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el3 | 0:1.4.2.12-1jpp.1.el3 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:3 From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el3 | 0:1.4.2.12-1jpp.1.el3 |
java-1.4.2-ibmRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el4 | 0:1.4.2.12-1jpp.1.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el4 | 0:1.4.2.12-1jpp.1.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el4 | 0:1.4.2.12-1jpp.1.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el4 | 0:1.4.2.12-1jpp.1.el4 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el4 | 0:1.4.2.12-1jpp.1.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el4 | 0:1.4.2.12-1jpp.1.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el4 | 0:1.4.2.12-1jpp.1.el4 |
java-1.4.2-ibmRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs |
before 0:1.4.2.12-1jpp.1.el5 | 0:1.4.2.12-1jpp.1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3113 is a high vulnerability (CVSS 10.0) in Sun Jdk, published July 9, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.44%, the 93rd percentile. No source names a fixed version.
References
lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
marc.info?l=bugtraq&m=122331139823057&w=2
secunia.com/advisories/32826
lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html
Show 116 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/43667
security.gentoo.org/glsa/glsa-200911-02.xml
vupen.com/english/advisories/2008/2740
sunsolve.sun.com/search/document.do?assetkey=1-66-238905-1
vmware.com/security/advisories/VMSA-2008-0016.html
support.apple.com/kb/HT3178
securitytracker.com/id?1020452
securityfocus.com/bid/30148
rhn.redhat.com/errata/RHSA-2008-0955.html
redhat.com/support/errata/RHSA-2008-0790.html
us-cert.gov/cas/techalerts/TA08-193A.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10454
nvd.nist.gov/vuln/detail/CVE-2008-3113
github.com/advisories/GHSA-32mg-gg62-gfq3
access.redhat.com/errata/RHSA-2008:0595
bugzilla.redhat.com/show_bug.cgi?id=452658
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0595.json
cve.org/CVERecord?id=CVE-2008-3103