CVE-2008-5346
Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and...
7.1 High
Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
Exploit likelihood
2.81%Up 0.1 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
- Record
CVE-2008-5346- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:C/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
- Record
CVE-2008-5346- Updated
- 2026-11-02
EUVDEUVD-2008-5323 No score
Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
- Record
EUVD-2008-5323- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3p93-j4fw-gpx2 No score
Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and...
Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
- Record
GHSA-3p93-j4fw-gpx2- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.5.0-sunRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sunRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
Show 62 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sunRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 20 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:3 From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el3 | 0:1.4.2.13-1jpp.1.el3 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:3 From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el3 | 0:1.4.2.13-1jpp.1.el3 |
java-1.4.2-ibm-develRed Hat:rhel_extras:3 From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el3 | 0:1.4.2.13-1jpp.1.el3 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:3 From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el3 | 0:1.4.2.13-1jpp.1.el3 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:3 From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el3 | 0:1.4.2.13-1jpp.1.el3 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:3 From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el3 | 0:1.4.2.13-1jpp.1.el3 |
java-1.4.2-ibmRed Hat:rhel_extras:4 From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibmRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:network_satellite:5.2::el4 From an advisory covering 14 CVEs |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-develRed Hat:network_satellite:5.2::el4 From an advisory covering 14 CVEs |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibmRed Hat:network_satellite:5.2::el5 From an advisory covering 14 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:network_satellite:5.2::el5 From an advisory covering 14 CVEs |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5346 is a high vulnerability (CVSS 7.1) in Sun Jdk, published December 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.81%, the 86th percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html
secunia.com/advisories/33015
support.avaya.com/elmodocs2/security/ASA-2009-012.htm
security.gentoo.org/glsa/glsa-200911-02.xml
www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf
Show 116 moreShow less
rhn.redhat.com/errata/RHSA-2009-0466.html
securitytracker.com/id?1021306
vupen.com/english/advisories/2008/3339
redhat.com/support/errata/RHSA-2009-0445.html
us-cert.gov/cas/techalerts/TA08-340A.html
support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6629
sunsolve.sun.com/search/document.do?assetkey=1-26-246386-1
osvdb.org/50507
nvd.nist.gov/vuln/detail/CVE-2008-5346
github.com/advisories/GHSA-3p93-j4fw-gpx2
access.redhat.com/errata/RHSA-2008:1025
blogs.sun.com/security/entry/advance_notification_of_security_updates3
bugzilla.redhat.com/show_bug.cgi?id=474556
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1025.json
cve.org/CVERecord?id=CVE-2008-2086
www-128.ibm.com/developerworks/java/jdk/alerts
ibm.com/developerworks/java/jdk/alerts