« Volver al listado

CVE-2008-5662

Estado: ModificadaAlta (9.3)—

Multiple buffer overflows in Sun Java Wireless Toolkit (WTK) for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

SUN — Java Wireless Toolkit FOR Cldc

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-5662",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-12-17T20:30:01.093",
  "references": [
    {
      "url": "http://secunia.com/advisories/33159",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-247566-1",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019851.1-1",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/32862",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1021414",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/3439",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47376",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/33159",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-247566-1",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019851.1-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/32862",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1021414",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/3439",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47376",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple buffer overflows in Sun Java Wireless Toolkit (WTK) for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors."
    },
    {
      "lang": "es",
      "value": "Desbordamiento múltiple de búfer en Sun Java Wireless Toolkit (WTK) para CLDC 2.5.2 y versiones anteriores que permite descargar programas para ejecutar arbitrariamente código a través de vectores desconocidos."
    }
  ],
  "lastModified": "2026-06-16T23:00:45.370",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sun:java_wireless_toolkit_for_cldc:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB58C06F-42A5-448A-9D77-3B8DACADA0C9",
              "versionEndIncluding": "2.5.2"
            },
            {
              "criteria": "cpe:2.3:a:sun:java_wireless_toolkit_for_cldc:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "757F80A5-1D3F-4184-B1D5-14B72BE802E5"
            },
            {
              "criteria": "cpe:2.3:a:sun:java_wireless_toolkit_for_cldc:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0788C58-7360-438A-BE9C-1CCDCF8313E5"
            },
            {
              "criteria": "cpe:2.3:a:sun:java_wireless_toolkit_for_cldc:2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB561E8E-F7F5-4FE1-AA68-0BBAEBB9C516"
            },
            {
              "criteria": "cpe:2.3:a:sun:java_wireless_toolkit_for_cldc:2.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "579ED29E-4930-4048-91DC-422EF67E5EAE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "evaluatorSolution": "Per http://sunsolve.sun.com/search/document.do?assetkey=1-26-247566-1\r\n\r\nThese issues are addressed in the following releases:\r\n\r\n    * Sun Java Wireless Toolkit for CLDC 2.5.2_01 or later\r\n\r\nSun Java Wireless Toolkit for CLDC is available at:\r\n\r\n    * http://java.sun.com/products/sjwtoolkit/"
}