CVE-2008-3106 Information disclosure in n/a

Medium 4.3 Published 9 Jul 2008 Updated 7 Aug 2024

Remote attackers can access URLs via XML processing in untrusted Java applets or applications, leading to information disclosure.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2008-3106?

CVE-2008-3106 is a medium-severity vulnerability in Sun Jdk, published on 9 Jul 2008. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted (1) application or (2) applet, a different vulnerability than CVE-2008-3105.

Weakness: CWE-264

Which versions are affected by CVE-2008-3106?

It affects 2 products.

Products include Sun Jdk, Sun Jre.

How do I fix CVE-2008-3106?

Upgrade to a fixed version.

Is CVE-2008-3106 being exploited?

There is no known exploitation of CVE-2008-3106 in the wild and no public exploit code.

All Sun Jdk vulnerabilities

Sources

Also known as GHSA-vjpx-8gm7-4pxc.