CVE-2008-5342
Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun...
5.0 MediumFix available
Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
Exploit likelihood
3.01%Up 0.3 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
- Record
CVE-2008-5342- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
- Record
CVE-2008-5342- Updated
- 2026-11-02
EUVDEUVD-2008-5319 No score
Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
- Record
EUVD-2008-5319- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6g4j-38c6-c7fh No score
Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun...
Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
- Record
GHSA-6g4j-38c6-c7fh- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sunRed Hat:rhel_extras:4 |
before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 |
before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.11-1jpp.1.el4 | 1:1.6.0.11-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
Show 99 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.11-1jpp.1.el5 | 1:1.6.0.11-1jpp.1.el5 |
java-1.5.0-sunRed Hat:rhel_extras:4 |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-demoRed Hat:rhel_extras:4 |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-develRed Hat:rhel_extras:4 |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:4 |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:4 |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sun-srcRed Hat:rhel_extras:4 |
before 0:1.5.0.17-1jpp.2.el4 | 0:1.5.0.17-1jpp.2.el4 |
java-1.5.0-sunRed Hat:rhel_extras:5::client |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::client |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::client |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::client |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::client |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sunRed Hat:rhel_extras:5::server |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-demoRed Hat:rhel_extras:5::server |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-develRed Hat:rhel_extras:5::server |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-pluginRed Hat:rhel_extras:5::server |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-sun-srcRed Hat:rhel_extras:5::server |
before 0:1.5.0.17-1jpp.2.el5 | 0:1.5.0.17-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.5.0.9-1jpp.4.el4 | 1:1.5.0.9-1jpp.4.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.5.0.9-1jpp.2.el5 | 1:1.5.0.9-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.4-1jpp.1.el4 | 1:1.6.0.4-1jpp.1.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.4-1jpp.1.el5 | 1:1.6.0.4-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:3 |
before 0:1.4.2.13-1jpp.1.el3 | 0:1.4.2.13-1jpp.1.el3 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:3 |
before 0:1.4.2.13-1jpp.1.el3 | 0:1.4.2.13-1jpp.1.el3 |
java-1.4.2-ibm-develRed Hat:rhel_extras:3 |
before 0:1.4.2.13-1jpp.1.el3 | 0:1.4.2.13-1jpp.1.el3 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:3 |
before 0:1.4.2.13-1jpp.1.el3 | 0:1.4.2.13-1jpp.1.el3 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:3 |
before 0:1.4.2.13-1jpp.1.el3 | 0:1.4.2.13-1jpp.1.el3 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:3 |
before 0:1.4.2.13-1jpp.1.el3 | 0:1.4.2.13-1jpp.1.el3 |
java-1.4.2-ibmRed Hat:rhel_extras:4 |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 |
before 0:1.4.2.13-1jpp.1.el4 | 0:1.4.2.13-1jpp.1.el4 |
java-1.4.2-ibmRed Hat:rhel_extras:5::client |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::client |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::client |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::client |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::client |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::client |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::client |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:5::server |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::server |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::server |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::server |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::server |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::server |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::server |
before 0:1.4.2.13-1jpp.1.el5 | 0:1.4.2.13-1jpp.1.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5342 is a medium vulnerability (CVSS 5.0) in Sun Jdk, published December 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.01%, the 87th percentile. Fixed in java-1.6.0-sun 1:1.6.0.11-1jpp.1.el4.
References
marc.info?l=bugtraq&m=126583436323697&w=2
lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html
vupen.com/english/advisories/2009/0672
osvdb.org/50514
secunia.com/advisories/34447
rhn.redhat.com/errata/RHSA-2008-1018.html
Show 130 moreShow less
support.avaya.com/elmodocs2/security/ASA-2009-012.htm
security.gentoo.org/glsa/glsa-200911-02.xml
www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf
redhat.com/support/errata/RHSA-2009-0369.html
us-cert.gov/cas/techalerts/TA08-340A.html
support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6359
lists.apple.com/archives/security-announce/2009/Feb/msg00003.html
sunsolve.sun.com/search/document.do?assetkey=1-26-244988-1
nvd.nist.gov/vuln/detail/CVE-2008-5342
github.com/advisories/GHSA-6g4j-38c6-c7fh
access.redhat.com/errata/RHSA-2008:1018
blogs.sun.com/security/entry/advance_notification_of_security_updates3
bugzilla.redhat.com/show_bug.cgi?id=474556
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_1018.json
cve.org/CVERecord?id=CVE-2008-2086
www-128.ibm.com/developerworks/java/jdk/alerts
ibm.com/developerworks/java/jdk/alerts