CVE-2008-1193 — JRE image parsing library allows privilege escalation (CVE-2008-1194)

Back Back to CVE browser

HIGH

JRE image parsing library allows privilege escalation (CVE-2008-1194)

Published Mar 6, 2008

9.3

HIGH

CVSS 2.0

EPSS 12.50%

Description

Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to gain privileges via an untrusted application.

Affected products

Extras for RHEL 4

java-1.5.0-ibm-1:1.5.0.7-1jpp.2.el4

Fixed · RHSA-2008:0210
Extras for RHEL 4

java-1.5.0-sun-0:1.5.0.15-1jpp.2.el4

Fixed · RHSA-2008:0186
Red Hat Network Satellite Server v 5.1

java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4

Fixed · RHSA-2008:0638
Supplementary for Red Hat Enterprise Linux 5

java-1.5.0-bea-0:1.5.0.14-1jpp.2.el5

Fixed · RHSA-2008:0244
Supplementary for Red Hat Enterprise Linux 5

java-1.5.0-ibm-1:1.5.0.7-1jpp.2.el5

Fixed · RHSA-2008:0210
Supplementary for Red Hat Enterprise Linux 5

java-1.5.0-sun-0:1.5.0.15-1jpp.2.el5

Fixed · RHSA-2008:0186
Supplementary for Red Hat Enterprise Linux 5

java-1.6.0-bea-1:1.6.0.03-1jpp.2.el5

Fixed · RHSA-2008:0245
Supplementary for Red Hat Enterprise Linux 5

java-1.6.0-ibm-1:1.6.0.1-1jpp.2.el5

Fixed · RHSA-2008:0267

Product	Package	State	Advisory
Extras for RHEL 4	java-1.5.0-ibm-1:1.5.0.7-1jpp.2.el4	Fixed	RHSA-2008:0210
Extras for RHEL 4	java-1.5.0-sun-0:1.5.0.15-1jpp.2.el4	Fixed	RHSA-2008:0186
Red Hat Network Satellite Server v 5.1	java-1.5.0-ibm-1:1.5.0.8-1jpp.1.el4	Fixed	RHSA-2008:0638
Supplementary for Red Hat Enterprise Linux 5	java-1.5.0-bea-0:1.5.0.14-1jpp.2.el5	Fixed	RHSA-2008:0244
Supplementary for Red Hat Enterprise Linux 5	java-1.5.0-ibm-1:1.5.0.7-1jpp.2.el5	Fixed	RHSA-2008:0210
Supplementary for Red Hat Enterprise Linux 5	java-1.5.0-sun-0:1.5.0.15-1jpp.2.el5	Fixed	RHSA-2008:0186
Supplementary for Red Hat Enterprise Linux 5	java-1.6.0-bea-1:1.6.0.03-1jpp.2.el5	Fixed	RHSA-2008:0245
Supplementary for Red Hat Enterprise Linux 5	java-1.6.0-ibm-1:1.6.0.1-1jpp.2.el5	Fixed	RHSA-2008:0267

Remediation

No remediation recorded yet.

Metrics

12.50% 0.12501

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.12501

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (16 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	12.50% (0.12501)	96.11th	v5 (v2026.06.15)
Jun 15, 2026	12.50% (0.12501)	95.70th	v5 (v2026.06.15)
Mar 30, 2025	37.38% (0.37381)	96.87th	v4 (v2025.03.14)
Mar 29, 2025	33.81% (0.33807)	95.25th	v4 (v2025.03.14)
Mar 17, 2025	37.38% (0.37381)	96.83th	v4 (v2025.03.14)
Jan 8, 2025	7.82% (0.07818)	94.22th	v3 (v2023.03.01)
Dec 17, 2024	6.77% (0.06774)	93.79th	v3 (v2023.03.01)
Dec 12, 2024	5.04% (0.05039)	93.18th	v3 (v2023.03.01)
Aug 8, 2024	5.18% (0.05181)	93.09th	v3 (v2023.03.01)
Jul 1, 2024	7.98% (0.07979)	94.32th	v3 (v2023.03.01)
Oct 21, 2023	7.54% (0.07543)	93.37th	v3 (v2023.03.01)
Sep 15, 2023	8.28% (0.08282)	93.61th	v3 (v2023.03.01)
Mar 7, 2023	9.88% (0.09878)	93.86th	v3 (v2023.03.01)
Mar 6, 2023	15.27% (0.15272)	95.95th	v2 (v2022.01.01)
Apr 1, 2022	15.27% (0.15272)	95.58th	v2 (v2022.01.01)
Feb 4, 2022	15.27% (0.15272)	91.38th	v2 (v2022.01.01)

Weaknesses (1)

CWE-264

References (40)

http://dev2dev.bea.com/pub/advisory/277
vendor-advisoryx_refsource_BEAThird Party Advisory
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
vendor-advisoryx_refsource_APPLEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html
vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://secunia.com/advisories/29239
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/29273
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/29498
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/29582
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/29841
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/29858
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/29897
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/30003
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/30676
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/30780
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/31497
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/32018
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://security.gentoo.org/glsa/glsa-200804-28.xml
vendor-advisoryx_refsource_GENTOOThird Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-233325-1
vendor-advisoryx_refsource_SUNALERTPatchThird Party Advisory
http://support.apple.com/kb/HT3178
x_refsource_CONFIRMThird Party Advisory
http://support.apple.com/kb/HT3179
x_refsource_CONFIRMThird Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml
vendor-advisoryx_refsource_GENTOOThird Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml
vendor-advisoryx_refsource_GENTOOThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0186.html
vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0210.html
vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0244.html
vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0245.html
vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0267.html
vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.securityfocus.com/bid/28125
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1019551
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://www.us-cert.gov/cas/techalerts/TA08-066A.html
third-party-advisoryx_refsource_CERTThird Party AdvisoryUS Government Resource
http://www.vmware.com/security/advisories/VMSA-2008-0010.html
x_refsource_CONFIRMThird Party Advisory
http://www.vupen.com/english/advisories/2008/0770/references
vdb-entryx_refsource_VUPENThird Party Advisory
http://www.vupen.com/english/advisories/2008/1252
vdb-entryx_refsource_VUPENThird Party Advisory
http://www.vupen.com/english/advisories/2008/1856/references
vdb-entryx_refsource_VUPENThird Party Advisory
https://access.redhat.com/security/cve/CVE-2008-1193
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=436296
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/41028
vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry
https://nvd.nist.gov/vuln/detail/CVE-2008-1193
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11409
vdb-entrysignaturex_refsource_OVALThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2008-1193

Link	Providers	Tags
http://dev2dev.bea.com/pub/advisory/277		vendor-advisoryx_refsource_BEAThird Party Advisory
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html		vendor-advisoryx_refsource_APPLEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html		vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html		vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://secunia.com/advisories/29239		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/29273		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/29498		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/29582		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/29841		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/29858		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/29897		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/30003		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/30676		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/30780		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/31497		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://secunia.com/advisories/32018		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://security.gentoo.org/glsa/glsa-200804-28.xml		vendor-advisoryx_refsource_GENTOOThird Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-233325-1		vendor-advisoryx_refsource_SUNALERTPatchThird Party Advisory
http://support.apple.com/kb/HT3178		x_refsource_CONFIRMThird Party Advisory
http://support.apple.com/kb/HT3179		x_refsource_CONFIRMThird Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml		vendor-advisoryx_refsource_GENTOOThird Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml		vendor-advisoryx_refsource_GENTOOThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0186.html		vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0210.html		vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0244.html		vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0245.html		vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0267.html		vendor-advisoryx_refsource_REDHATThird Party Advisory
http://www.securityfocus.com/bid/28125		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1019551		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://www.us-cert.gov/cas/techalerts/TA08-066A.html		third-party-advisoryx_refsource_CERTThird Party AdvisoryUS Government Resource
http://www.vmware.com/security/advisories/VMSA-2008-0010.html		x_refsource_CONFIRMThird Party Advisory
http://www.vupen.com/english/advisories/2008/0770/references		vdb-entryx_refsource_VUPENThird Party Advisory
http://www.vupen.com/english/advisories/2008/1252		vdb-entryx_refsource_VUPENThird Party Advisory
http://www.vupen.com/english/advisories/2008/1856/references		vdb-entryx_refsource_VUPENThird Party Advisory
https://access.redhat.com/security/cve/CVE-2008-1193		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=436296		Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/41028		vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry
https://nvd.nist.gov/vuln/detail/CVE-2008-1193
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11409		vdb-entrysignaturex_refsource_OVALThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2008-1193

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 6, 2008

Updated Aug 7, 2024

Reserved Mar 6, 2008

Link CVE-2008-1193

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-1193

Red Hat

Severity Critical

Public date Mar 6, 2008

Links CVE-2008-1193 - Bugzilla