CVE-2008-4910: Sun Java Web Start

High severity, CVSS 10.0. EPSS: 10.3% chance of exploitation in the next 30 days.

The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the showDocument method.

Affected products

• Sun Java Web Start: any version

Published 2008-11-04. Last modified 2026-06-16.