ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securitytracker.com/id?1020189	vdb-entry x_refsource_SECTRACK x_transferred
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=708	third-party-advisory x_refsource_IDEFENSE x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/42830	vdb-entry x_refsource_XF x_transferred
http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1	vendor-advisory x_refsource_SUNALERT x_transferred
http://www.vupen.com/english/advisories/2008/1742/references	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/30523	third-party-advisory x_refsource_SECUNIA x_transferred

Hyperlink: http://www.securitytracker.com/id?1020189

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=708

Resource:

third-party-advisory

x_refsource_IDEFENSE

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/42830

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1

Resource:

vendor-advisory

x_refsource_SUNALERT

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/1742/references

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Sun Microsystems (Oracle Corporation)

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:04 Jun, 2008 | 20:32

Updated At:23 Apr, 2026 | 00:35

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

>>java_asp_server>>Versions up to 4.0.2(inclusive)

cpe:2.3:a:sun:java_asp_server:*:*:*:*:*:*:*:*

Sun Microsystems (Oracle Corporation)

>>java_asp_server>>4.0

cpe:2.3:a:sun:java_asp_server:4.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=708	cve@mitre.org	N/A
http://secunia.com/advisories/30523	cve@mitre.org	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1	cve@mitre.org	Patch
http://www.securitytracker.com/id?1020189	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2008/1742/references	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/42830	cve@mitre.org	N/A
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=708	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/30523	af854a3a-2127-422b-91ae-364da2661108	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.securitytracker.com/id?1020189	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2008/1742/references	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/42830	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=708

Source: cve@mitre.org

Resource: N/A

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://www.securitytracker.com/id?1020189

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/1742/references

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/42830

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=708

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-66-238184-1

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://www.securitytracker.com/id?1020189

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/1742/references

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/42830

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1944Records found

CVE-2008-4541

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-15.79% / 94.88%

7 Day CHG~0.00%

Published-13 Oct, 2008 | 18:00

Updated-23 Apr, 2026 | 00:35

Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.

Product-java_system_web_proxy_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-4556

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-83.44% / 99.30%

7 Day CHG~0.00%

Published-14 Oct, 2008 | 22:00

Updated-23 Apr, 2026 | 00:35

Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request.

Product-solaris n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-3869

Matching Score-10

Assigner-Flexera Software LLC

Matching Score-10

Assigner-Flexera Software LLC

CVSS Score-10||HIGH

EPSS-33.28% / 97.02%

7 Day CHG~0.00%

Published-26 May, 2009 | 21:00

Updated-23 Apr, 2026 | 00:35

Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request parameters.

Product-solaris n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2140

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-89.32% / 99.56%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.

Product-adobe_air mac_os_x sunos windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-3108

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-8.62% / 92.61%

7 Day CHG~0.00%

Published-09 Jul, 2008 | 23:00

Updated-23 Apr, 2026 | 00:35

Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allows context-dependent attackers to gain privileges via unspecified vectors related to font processing.

Product-jdk jre sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-3111

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-13.36% / 94.34%

7 Day CHG~0.00%

Published-09 Jul, 2008 | 23:00

Updated-23 Apr, 2026 | 00:35

Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by (a) an application that grants itself privileges to (1) read local files, (2) write to local files, or (3) execute local programs; and as demonstrated by (b) a long value associated with a java-vm-args attribute in a j2se tag in a JNLP file, which triggers a stack-based buffer overflow in the GetVMArgsOption function; aka CR 6557220.

Product-jdk jre sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2011-2135

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-6.34% / 91.18%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Product-adobe_air mac_os_x sunos windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2007-5019

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-10.46% / 93.40%

7 Day CHG~0.00%

Published-20 Sep, 2007 | 21:00

Updated-23 Apr, 2026 | 00:35

Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a long argument to the dnsResolve (isInstalled.dnsResolve) method.

Product-java_web_start jre sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2445

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.59% / 82.02%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-adobe_air mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2415

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-11.00% / 93.59%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2414.

Product-adobe_air mac_os_x sunos windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2459

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.59% / 82.02%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2460.

Product-adobe_air mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2456

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-4.28% / 89.09%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

Product-adobe_air mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2460

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.59% / 82.02%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2459.

Product-adobe_air mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2453

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.59% / 82.02%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-adobe_air mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2003-1576

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-4.67% / 89.56%

7 Day CHG~0.00%

Published-28 Jan, 2010 | 20:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on the sparc platform allows remote attackers to execute arbitrary code via unspecified vectors.

Product-solaris change_manager management_center n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1493

Matching Score-10

Assigner-Oracle

Matching Score-10

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-91.61% / 99.69%

7 Day CHG~0.00%

Published-04 Mar, 2013 | 16:00

Updated-29 Apr, 2026 | 01:13

The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.

Vendor-n/a Oracle Corporation Sun Microsystems (Oracle Corporation)

Product-jre jdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-1999-1588

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-18.17% / 95.34%

7 Day CHG~0.00%

Published-21 Apr, 2006 | 10:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766.

Product-solaris n/a solaris

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2137

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-6.82% / 91.53%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 21:16

Updated-29 Apr, 2026 | 01:13

Product-adobe_air mac_os_x sunos windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2451

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.59% / 82.02%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-adobe_air mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2425

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-7.98% / 92.26%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Product-adobe_air mac_os_x sunos windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2455

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.59% / 82.02%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2459, and CVE-2011-2460.

Product-adobe_air mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2417

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-7.98% / 92.26%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Product-adobe_air mac_os_x sunos windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2110

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-91.50% / 99.69%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June 2011.

Product-mac_os_x sunos windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2457

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-4.28% / 89.09%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

Product-adobe_air mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2452

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.59% / 82.02%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-adobe_air mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2414

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-11.00% / 93.59%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Product-adobe_air mac_os_x sunos windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2450

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-2.73% / 86.27%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Product-adobe_air mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2454

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.59% / 82.02%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-adobe_air mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2134

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-6.82% / 91.53%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 21:16

Updated-29 Apr, 2026 | 01:13

Product-adobe_air mac_os_x sunos windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2130

Matching Score-10

Matching Score-10

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-10||HIGH

EPSS-6.82% / 91.53%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 21:16

Updated-29 Apr, 2026 | 01:13

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2134, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.

Product-adobe_air mac_os_x sunos windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0361

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-88.54% / 99.52%

7 Day CHG+0.15%

Published-20 Jan, 2010 | 16:00

Updated-23 Apr, 2026 | 00:35

Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request.

Product-java_system_web_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2009-1096

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-9.89% / 93.17%

7 Day CHG~0.00%

Published-25 Mar, 2009 | 23:00

Updated-23 Apr, 2026 | 00:35

Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.

Product-jdk jre n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2001-0236

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-69.73% / 98.68%

7 Day CHG~0.00%

Published-09 Mar, 2002 | 05:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.

Product-sunos solaris n/a

CVE-2001-0554

Matching Score-8

Assigner-MITRE Corporation

Vendor-netkit n/a OpenBSD Debian GNU/Linux IBM Corporation Silicon Graphics, Inc.NetBSD MIT (Massachusetts Institute of Technology)FreeBSD Foundation Sun Microsystems (Oracle Corporation)

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-16.67% / 95.08%

7 Day CHG~0.00%

Published-09 Mar, 2002 | 05:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

Product-debian_linux sunos irix solaris netbsd freebsd kerberos aix kerberos_5 linux_netkit openbsd n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2008-3553

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-5.15% / 90.09%

7 Day CHG~0.00%

Published-08 Aug, 2008 | 19:00

Updated-23 Apr, 2026 | 00:35

Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition devices allow remote attackers to execute arbitrary code via unknown vectors, probably related to MIDP privilege escalation and persistent MIDlets, aka "ISSUES 3-10." NOTE: as of 20080807, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a company led by a well-known researcher, it is being assigned a CVE identifier for tracking purposes.

Vendor-n/a Nokia Corporation Sun Microsystems (Oracle Corporation)

Product-j2me series_40 n/a

CVE-2008-4910

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-7.25% / 91.81%

7 Day CHG~0.00%

Published-04 Nov, 2008 | 01:00

Updated-23 Apr, 2026 | 00:35

The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the showDocument method.

Product-java_web_start n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2008-5353

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-89.53% / 99.58%

7 Day CHG~0.00%

Published-05 Dec, 2008 | 11:00

Updated-23 Apr, 2026 | 00:35

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".

Product-jdk jre sdk n/a

CVE-2008-5340

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-3.42% / 87.73%

7 Day CHG-0.59%

Published-05 Dec, 2008 | 11:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications via unknown vectors, aka 6727081.

Product-jdk jre sdk n/a

CVE-2008-5010

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-10.98% / 93.59%

7 Day CHG~0.00%

Published-10 Nov, 2008 | 15:00

Updated-23 Apr, 2026 | 00:35

in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unknown DHCP requests related to the "number of offers," aka Bug ID 6713805.

Product-opensolaris solaris n/a

CVE-2008-5685

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-2.42% / 85.44%

7 Day CHG~0.00%

Published-19 Dec, 2008 | 17:00

Updated-23 Apr, 2026 | 00:35

Sun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on Sun Fire and Netra platforms allows remote attackers to access the System Controller (SC), the system console, and possibly the host OS, and cause a denial of service (shutdown or reboot), via spoofed IP packets.

Product-scapp sun_fire netra n/a

CVE-2008-5355

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-15.92% / 94.91%

7 Day CHG~0.00%

Published-05 Dec, 2008 | 11:00

Updated-23 Apr, 2026 | 00:35

The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to execute arbitrary code via DNS man-in-the-middle attacks.

Product-jdk jre sdk n/a

CWE ID-CWE-287

Improper Authentication

CVE-2000-0697

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-7.09% / 91.71%

7 Day CHG~0.00%

Published-21 Sep, 2000 | 04:00

Updated-16 Apr, 2026 | 00:27

The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.

Product-solaris_answerbook2 n/a

CVE-2008-3870

Matching Score-8

Assigner-Flexera Software LLC

Matching Score-8

Assigner-Flexera Software LLC

CVSS Score-10||HIGH

EPSS-30.62% / 96.83%

7 Day CHG~0.00%

Published-26 May, 2009 | 21:00

Updated-23 Apr, 2026 | 00:35

Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-based buffer overflow, related to improper memory allocation.

Product-solaris n/a

CVE-2000-0844

Matching Score-8

Assigner-MITRE Corporation

Vendor-immunix conectiva trustix turbolinux n/a Debian GNU/Linux Mandriva (Mandrakesoft)Slackware IBM Corporation Silicon Graphics, Inc.Sun Microsystems (Oracle Corporation)The MITRE Corporation (Caldera)Red Hat, Inc.SUSE

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.89% / 75.99%

7 Day CHG+0.08%

Published-22 Jan, 2001 | 05:00

Updated-16 Apr, 2026 | 00:27

Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.

Product-debian_linux sunos openlinux_ebuilder linux irix openlinux solaris mandrake_linux suse_linux turbolinux openlinux_eserver secure_linux aix slackware_linux immunix n/a

CVE-2000-0812

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-2.55% / 85.80%

7 Day CHG~0.00%

Published-18 Oct, 2000 | 04:00

Updated-16 Apr, 2026 | 00:27

The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag.

Product-java_system_web_server n/a

CVE-2008-3107

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-14.53% / 94.61%

7 Day CHG~0.00%

Published-09 Jul, 2008 | 23:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.

Product-jdk jre sdk n/a

CVE-2008-3113

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-20.57% / 95.70%

7 Day CHG~0.00%

Published-09 Jul, 2008 | 23:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.

Product-jdk jre sdk n/a

CVE-2008-2144

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-22.61% / 95.97%

7 Day CHG+2.10%

Published-12 May, 2008 | 19:00

Updated-23 Apr, 2026 | 00:35

Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to cause a denial of service or execute arbitrary code via unknown vectors.

Product-sunos n/a

CVE-2000-0175

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-1.19% / 79.22%

7 Day CHG~0.00%

Published-12 Jul, 2000 | 04:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.

Product-staroffice n/a

CVE-1999-1584

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.48% / 65.39%

7 Day CHG~0.00%

Published-30 Aug, 2005 | 04:00

Updated-16 Apr, 2026 | 00:27

Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root privileges via environment variables, a different vulnerability than CVE-1999-1586.