NVD脆弱性詳細

CVE-2008-3106

概要	Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted (1) application or (2) applet, a different vulnerability than CVE-2008-3105.
公表日	2008年7月10日8:41
登録日	2021年1月29日13:39
最終更新日	2018年10月12日5:46

CVSS2.0 : MEDIUM
スコア	4.3
ベクター	AV:N/AC:M/Au:N/C:P/I:N/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	なし
可用性への影響(A)	なし
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:sun:jdk:5.0:update_1::::::
cpe:2.3:a:sun:jdk:5.0:update_10::::::
cpe:2.3:a:sun:jdk:5.0:update_11::::::
cpe:2.3:a:sun:jdk:5.0:update_12::::::
cpe:2.3:a:sun:jdk:5.0:update_13::::::
cpe:2.3:a:sun:jdk:5.0:update_14::::::
cpe:2.3:a:sun:jdk::update_15::::::*		5.0
cpe:2.3:a:sun:jdk:5.0:update_2::::::
cpe:2.3:a:sun:jdk:5.0:update_3::::::
cpe:2.3:a:sun:jdk:5.0:update_4::::::
cpe:2.3:a:sun:jdk:5.0:update_5::::::
cpe:2.3:a:sun:jdk:5.0:update_6::::::
cpe:2.3:a:sun:jdk:5.0:update_7::::::
cpe:2.3:a:sun:jdk:5.0:update_8::::::
cpe:2.3:a:sun:jdk:5.0:update_9::::::
cpe:2.3:a:sun:jdk:6:update_1::::::
cpe:2.3:a:sun:jdk:6:update_2::::::
cpe:2.3:a:sun:jdk:6:update_3::::::
cpe:2.3:a:sun:jdk:6:update_4::::::
cpe:2.3:a:sun:jdk:6:update_5::::::
cpe:2.3:a:sun:jdk::update_6::::::*		6
cpe:2.3:a:sun:jre:5.0:update_1::::::
cpe:2.3:a:sun:jre:5.0:update_10::::::
cpe:2.3:a:sun:jre:5.0:update_11::::::
cpe:2.3:a:sun:jre:5.0:update_12::::::
cpe:2.3:a:sun:jre:5.0:update_13::::::
cpe:2.3:a:sun:jre:5.0:update_14::::::
cpe:2.3:a:sun:jre::update_15::::::*		5.0
cpe:2.3:a:sun:jre:5.0:update_2::::::
cpe:2.3:a:sun:jre:5.0:update_3::::::
cpe:2.3:a:sun:jre:5.0:update_4::::::
cpe:2.3:a:sun:jre:5.0:update_5::::::
cpe:2.3:a:sun:jre:5.0:update_6::::::
cpe:2.3:a:sun:jre:5.0:update_7::::::
cpe:2.3:a:sun:jre:5.0:update_8::::::
cpe:2.3:a:sun:jre:5.0:update_9::::::
cpe:2.3:a:sun:jre:6:update_1::::::
cpe:2.3:a:sun:jre:6:update_2::::::
cpe:2.3:a:sun:jre:6:update_3::::::
cpe:2.3:a:sun:jre:6:update_4::::::
cpe:2.3:a:sun:jre:6:update_5::::::
cpe:2.3:a:sun:jre::update_6::::::*		6

関連情報、対策とツール

No	URL	refsource	タグ
1	http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html	APPLE
2	http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html	SUSE
3	http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00000.html	SUSE
4	http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00002.html	SUSE
5	http://marc.info/?l=bugtraq&m=122331139823057&w=2	BUGTRAQ
6	http://secunia.com/advisories/31010	SECUNIA	Vendor Advisory
7	http://secunia.com/advisories/31320	SECUNIA
8	http://secunia.com/advisories/31497	SECUNIA
9	http://secunia.com/advisories/31600	SECUNIA
10	http://secunia.com/advisories/31736	SECUNIA
11	http://secunia.com/advisories/32018	SECUNIA
12	http://secunia.com/advisories/32179	SECUNIA
13	http://secunia.com/advisories/32180	SECUNIA
14	http://secunia.com/advisories/32436	SECUNIA
15	http://secunia.com/advisories/33237	SECUNIA
16	http://secunia.com/advisories/33238	SECUNIA
17	http://secunia.com/advisories/37386	SECUNIA
18	http://security.gentoo.org/glsa/glsa-200911-02.xml	GENTOO
19	http://sunsolve.sun.com/search/document.do?assetkey=1-66-238628-1	SUNALERT
20	http://support.apple.com/kb/HT3179	CONFIRM
21	http://support.avaya.com/elmodocs2/security/ASA-2008-299.htm	CONFIRM
22	http://support.avaya.com/elmodocs2/security/ASA-2008-428.htm	CONFIRM
23	http://support.avaya.com/elmodocs2/security/ASA-2008-507.htm	CONFIRM
24	http://support.avaya.com/elmodocs2/security/ASA-2008-509.htm	CONFIRM
25	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=751014	CONFIRM
26	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=756717	CONFIRM
27	http://www.redhat.com/support/errata/RHSA-2008-0594.html	REDHAT
28	http://www.redhat.com/support/errata/RHSA-2008-0790.html	REDHAT
29	http://www.redhat.com/support/errata/RHSA-2008-0906.html	REDHAT
30	http://www.redhat.com/support/errata/RHSA-2008-1044.html	REDHAT
31	http://www.redhat.com/support/errata/RHSA-2008-1045.html	REDHAT
32	http://www.securityfocus.com/archive/1/497041/100/0/threaded	BUGTRAQ
33	http://www.securityfocus.com/bid/30143	BID
34	http://www.securitytracker.com/id?1020457	SECTRACK
35	http://www.us-cert.gov/cas/techalerts/TA08-193A.html	CERT	US Government Resource
36	http://www.vmware.com/security/advisories/VMSA-2008-0016.html	CONFIRM
37	http://www.vupen.com/english/advisories/2008/2056/references	VUPEN
38	http://www.vupen.com/english/advisories/2008/2740	VUPEN
39	https://exchange.xforce.ibmcloud.com/vulnerabilities/43658	XF
40	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10866	OVAL

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-264	認可・権限・アクセス制御	https://cwe.mitre.org/data/definitions/264.html

構成1	以上	以下	より上	未満
cpe:2.3:a:sun:jdk:5.0:update_1::::::
cpe:2.3:a:sun:jdk:5.0:update_10::::::
cpe:2.3:a:sun:jdk:5.0:update_11::::::
cpe:2.3:a:sun:jdk:5.0:update_12::::::
cpe:2.3:a:sun:jdk:5.0:update_13::::::
cpe:2.3:a:sun:jdk:5.0:update_14::::::
cpe:2.3:a:sun:jdk::update_15::::::*		5.0
cpe:2.3:a:sun:jdk:5.0:update_2::::::
cpe:2.3:a:sun:jdk:5.0:update_3::::::
cpe:2.3:a:sun:jdk:5.0:update_4::::::
cpe:2.3:a:sun:jdk:5.0:update_5::::::
cpe:2.3:a:sun:jdk:5.0:update_6::::::
cpe:2.3:a:sun:jdk:5.0:update_7::::::
cpe:2.3:a:sun:jdk:5.0:update_8::::::
cpe:2.3:a:sun:jdk:5.0:update_9::::::
cpe:2.3:a:sun:jdk:6:update_1::::::
cpe:2.3:a:sun:jdk:6:update_2::::::
cpe:2.3:a:sun:jdk:6:update_3::::::
cpe:2.3:a:sun:jdk:6:update_4::::::
cpe:2.3:a:sun:jdk:6:update_5::::::
cpe:2.3:a:sun:jdk::update_6::::::*		6
cpe:2.3:a:sun:jre:5.0:update_1::::::
cpe:2.3:a:sun:jre:5.0:update_10::::::
cpe:2.3:a:sun:jre:5.0:update_11::::::
cpe:2.3:a:sun:jre:5.0:update_12::::::
cpe:2.3:a:sun:jre:5.0:update_13::::::
cpe:2.3:a:sun:jre:5.0:update_14::::::
cpe:2.3:a:sun:jre::update_15::::::*		5.0
cpe:2.3:a:sun:jre:5.0:update_2::::::
cpe:2.3:a:sun:jre:5.0:update_3::::::
cpe:2.3:a:sun:jre:5.0:update_4::::::
cpe:2.3:a:sun:jre:5.0:update_5::::::
cpe:2.3:a:sun:jre:5.0:update_6::::::
cpe:2.3:a:sun:jre:5.0:update_7::::::
cpe:2.3:a:sun:jre:5.0:update_8::::::
cpe:2.3:a:sun:jre:5.0:update_9::::::
cpe:2.3:a:sun:jre:6:update_1::::::
cpe:2.3:a:sun:jre:6:update_2::::::
cpe:2.3:a:sun:jre:6:update_3::::::
cpe:2.3:a:sun:jre:6:update_4::::::
cpe:2.3:a:sun:jre:6:update_5::::::
cpe:2.3:a:sun:jre::update_6::::::*		6