CVE-2008-5358: Sun JDK

High severity, CVSS 9.3. EPSS: 7.5% chance of exploitation in the next 30 days.

Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.

Affected products

• Sun JDK: up to and including 6; version 6 only
• Sun JRE: up to and including 6; version 6 only

Published 2008-12-05. Last modified 2026-06-16.