CVE-2008-1196

Description

Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.

Risk Information

Base Score

7.8

MODERATE

Vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

31.252

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in Java jdk (x64) 6.4(x64)	Windows
Multiple vulnerabilities affected in Java jdk 6.4	Windows
Multiple vulnerabilities affected in Java jre (x64) 6.4(x64)	Windows
Multiple vulnerabilities affected in Java jre 6.4	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234