CVE-2008-1192 describes an unspecified vulnerability in the Java Plug-in affecting Sun JDK, JRE, and SDK versions 6u4 and earlier, 5.0u14 and earlier, 1.4.2_16 and earlier, and 1.3.1_21 and earlier. This medium-complexity vulnerability allows remote attackers to bypass the same-origin policy and execute local applications, leading to potential compromise of confidentiality, integrity, and availability. With a CVSS score of 6.8, this vulnerability is not listed in CISA's KEV catalog, and there is no public exploit code available or evidence of active exploitation. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.5.0CPE matchmatch criteria | cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:* | ||
1.5.0CPE matchmatch criteria | cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:* | ||
1.5.0CPE matchmatch criteria | cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:* | ||
1.5.0CPE matchmatch criteria | cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:* | ||
1.5.0CPE matchmatch criteria | cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.