CVE-2008-1191: Sun JDK

Medium severity, CVSS 6.8. EPSS: 3.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via an untrusted application, a different issue than CVE-2008-1190, aka "The fifth issue."

Affected products

• Sun JDK: up to and including 6_update_4
• Sun JRE: up to and including 6_update_4

Published 2008-03-06. Last modified 2026-06-16.