CVE-2008-3107: Sun JDK

High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.

Affected products

• Sun JDK: up to and including 5.0; up to and including 6; version 5.0 only; version 6 only
• Sun JRE: up to and including 1.4.2_17; up to and including 5.0; up to and including 6; version 1.4.2 only; version 1.4.2_01 only; version 1.4.2_02 only; …
• Sun SDK: up to and including 1.4.2_17; version 1.4.2_02 only; version 1.4.2_03 only; version 1.4.2_04 only; version 1.4.2_05 only; version 1.4.2_06 only; …

Published 2008-07-09. Last modified 2026-06-16.