CVE-2008-1187

Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to cause a denial of service (JRE crash) and possibly execute arbitrary code via unknown vectors related to XSLT transforms.

🔗 References (90)

• cve@mitrehttp://dev2dev.bea.com/pub/advisory/277
• cve@mitrehttp://download.novell.com/Download?buildid=q5exhSqeBjA~
• cve@mitrehttp://jvn.jp/en/jp/JVN04032535/index.html
• cve@mitrehttp://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000016.html
• cve@mitrehttp://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
• cve@mitrehttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html
• cve@mitrehttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html
• cve@mitrehttp://secunia.com/advisories/29239
• cve@mitrehttp://secunia.com/advisories/29273
• cve@mitrehttp://secunia.com/advisories/29498
• cve@mitrehttp://secunia.com/advisories/29582
• cve@mitrehttp://secunia.com/advisories/29841
• cve@mitrehttp://secunia.com/advisories/29858
• cve@mitrehttp://secunia.com/advisories/29897
• cve@mitrehttp://secunia.com/advisories/29999