Vulnerabilities > SUN > JRE > 1.4.2.18

DATE CVE VULNERABILITY TITLE RISK
2008-12-05 CVE-2008-2086 Code Injection vulnerability in SUN Jdk, JRE and SDK
Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
network
sun CWE-94
critical
 9.3
9.3
2008-07-09 CVE-2008-3108 Buffer Errors vulnerability in SUN Jdk, JRE and SDK
Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allows context-dependent attackers to gain privileges via unspecified vectors related to font processing.
network
low complexity
sun CWE-119
critical
 10.0
10
2008-03-06 CVE-2008-1191 Unspecified vulnerability in SUN JDK and JRE
Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via an untrusted application, a different issue than CVE-2008-1190, aka "The fifth issue."
network
sun
6.8
6.8