Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jdk:5.0:update_8:*:*:*:*:*:*

part: a version: 5.0 update: update_8

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJdk (86ca1592-c9ed-54c6-9315-e1ffda84ce5b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-2675 vulnerable 2026-06-08 04:51:29.873098 Details available
Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent attackers to gain privileges via unspecified length fields in the header of a Pack200-compressed JAR file, which leads to a heap-based buffer overflow during decompression.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:57.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2673 vulnerable 2026-06-08 04:51:29.852929 Details available
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lacks the final keyword.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.917Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2672 vulnerable 2026-06-08 04:51:29.850899 Details available
The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to browser cookies by untrusted (1) applets and (2) Java Web Start applications, which allows remote attackers to hijack web sessions via unspecified vectors.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2671 vulnerable 2026-06-08 04:51:29.848819 Details available
The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover the username of the account that invoked an untrusted (1) applet or (2) Java Web Start application via unspecified vectors.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.765Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2670 vulnerable 2026-06-08 04:51:29.819230 Details available
The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by (1) untrusted applets and (2) Java Web Start applications, which allows context-dependent attackers to obtain sensitive information by reading these properties.
Published: 2009-08-05T19:00:00.000Z
Updated: 2024-08-07T05:59:56.843Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5356 vulnerable 2026-06-08 04:50:51.074004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5355 vulnerable 2026-06-08 04:50:51.069633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5354 vulnerable 2026-06-08 04:50:51.066574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5353 vulnerable 2026-06-08 04:50:51.062618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5351 vulnerable 2026-06-08 04:50:51.057390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5350 vulnerable 2026-06-08 04:50:51.054582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5348 vulnerable 2026-06-08 04:50:51.050290 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5344 vulnerable 2026-06-08 04:50:50.916477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5343 vulnerable 2026-06-08 04:50:50.913669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5342 vulnerable 2026-06-08 04:50:50.911044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5341 vulnerable 2026-06-08 04:50:50.908306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5340 vulnerable 2026-06-08 04:50:50.905609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5339 vulnerable 2026-06-08 04:50:50.866469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3115 vulnerable 2026-06-08 04:50:33.171708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3114 vulnerable 2026-06-08 04:50:33.169799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3113 vulnerable 2026-06-08 04:50:33.167579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3112 vulnerable 2026-06-08 04:50:33.165245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3111 vulnerable 2026-06-08 04:50:33.156995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3107 vulnerable 2026-06-08 04:50:33.100020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3106 vulnerable 2026-06-08 04:50:33.098353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3104 vulnerable 2026-06-08 04:50:33.053810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3103 vulnerable 2026-06-08 04:50:33.037811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2086 vulnerable 2026-06-08 04:50:22.879955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1187 vulnerable 2026-06-08 04:50:19.500345 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.