CVE-2008-5351

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts…

published December 5, 2008

CVSS
—
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for other applications that rely on shortest-form UTF-8 encodings.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03426 · 88.9th percentile
Published
2008-12-05T11:00Z
EPSS history
Timeline
  • 05 DEC 11:00Z
    Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts…
    cvelistv5