← Database

CVE-2008-5340

CRITICAL CVSS: 10.0 Published: 2008-12-05 Modified: 2026-06-16

Description

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications via unknown vectors, aka 6727081.

Affected Platforms

Sun JreSun SdkSun Jdk

Weakness Type

CWE-264

References