CVE 설명

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".

CVE 정보

메트릭

메트릭	점수	심각도	CVSS 벡터	출처
V2	10		AV:N/AC:L/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.

EPSS 점수

EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.

EPSS 백분위수

백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.

EPSS First.org

익스플로잇 정보

Exploit Database EDB-ID : 16302

게시일 : 2011-01-07 23h00 +00:00
저자 : Metasploit
EDB 검증됨 : Yes

Exploit Database EDB-ID : 16293

게시일 : 2010-09-19 22h00 +00:00
저자 : Metasploit
EDB 검증됨 : Yes

Exploit Database EDB-ID : 9948

게시일 : 2008-12-02 23h00 +00:00
저자 : sf
EDB 검증됨 : Yes

Exploit Database EDB-ID : 8753

게시일 : 2009-05-19 22h00 +00:00
저자 : Landon Fuller
EDB 검증됨 : Yes

언급된 제품

구성 0

Sun>>Jdk >> Version 까지 (포함) 5.0

Sun>>Jdk >> Version 까지 (포함) 6

Sun>>Jdk >> Version 5.0

Sun>>Jdk >> Version 6

Sun>>Jre >> Version 까지 (포함) 1.4.2_18

Sun>>Jre >> Version 까지 (포함) 5.0

Sun>>Jre >> Version 까지 (포함) 6

Sun>>Jre >> Version 1.4.2_1

Sun>>Jre >> Version 1.4.2_2

Sun>>Jre >> Version 1.4.2_3

Sun>>Jre >> Version 1.4.2_4

Sun>>Jre >> Version 1.4.2_5

Sun>>Jre >> Version 1.4.2_6

Sun>>Jre >> Version 1.4.2_7

Sun>>Jre >> Version 1.4.2_8

Sun>>Jre >> Version 1.4.2_9

Sun>>Jre >> Version 1.4.2_10

Sun>>Jre >> Version 1.4.2_11

Sun>>Jre >> Version 1.4.2_12

Sun>>Jre >> Version 1.4.2_13

Sun>>Jre >> Version 1.4.2_14

Sun>>Jre >> Version 1.4.2_15

Sun>>Jre >> Version 1.4.2_16

Sun>>Jre >> Version 1.4.2_17

Sun>>Jre >> Version 5.0

Sun>>Jre >> Version 6

Sun>>Sdk >> Version 까지 (포함) 1.4.2_18

Sun>>Sdk >> Version 1.4.2_1

Sun>>Sdk >> Version 1.4.2_2

Sun>>Sdk >> Version 1.4.2_3

Sun>>Sdk >> Version 1.4.2_4

Sun>>Sdk >> Version 1.4.2_5

Sun>>Sdk >> Version 1.4.2_6

Sun>>Sdk >> Version 1.4.2_7

Sun>>Sdk >> Version 1.4.2_8

Sun>>Sdk >> Version 1.4.2_9

Sun>>Sdk >> Version 1.4.2_10

Sun>>Sdk >> Version 1.4.2_11

Sun>>Sdk >> Version 1.4.2_12

Sun>>Sdk >> Version 1.4.2_13

Sun>>Sdk >> Version 1.4.2_14

Sun>>Sdk >> Version 1.4.2_15

Sun>>Sdk >> Version 1.4.2_16

Sun>>Sdk >> Version 1.4.2_17

참고 자료

http://marc.info/?l=bugtraq&m=126583436323697&w=2
Tags : vendor-advisory, x_refsource_HP

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00004.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/34259
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2009/0672
Tags : vdb-entry, x_refsource_VUPEN

http://rhn.redhat.com/errata/RHSA-2008-1018.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/33015
Tags : third-party-advisory, x_refsource_SECUNIA

http://support.avaya.com/elmodocs2/security/ASA-2009-012.htm
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/34889
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/34233
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securitytracker.com/id?1021313
Tags : vdb-entry, x_refsource_SECTRACK

http://security.gentoo.org/glsa/glsa-200911-02.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/03/024431-01.pdf
Tags : x_refsource_CONFIRM

http://blog.cr0.org/2009/05/write-once-own-everyone.html
Tags : x_refsource_MISC

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00009.html
Tags : vendor-advisory, x_refsource_SUSE

http://marc.info/?l=bugtraq&m=123678756409861&w=2
Tags : vendor-advisory, x_refsource_HP

http://secunia.com/advisories/38539
Tags : third-party-advisory, x_refsource_SECUNIA

http://landonf.bikemonkey.org/code/macosx/CVE-2008-5353.20090519.html
Tags : x_refsource_MISC

http://secunia.com/advisories/34972
Tags : third-party-advisory, x_refsource_SECUNIA

https://rhn.redhat.com/errata/RHSA-2009-0466.html
Tags : vendor-advisory, x_refsource_REDHAT

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/35065
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/33528
Tags : third-party-advisory, x_refsource_SECUNIA

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6511
Tags : vdb-entry, signature, x_refsource_OVAL

http://www.securityfocus.com/archive/1/503797/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://rhn.redhat.com/errata/RHSA-2008-1025.html
Tags : vendor-advisory, x_refsource_REDHAT

http://marc.info/?l=bugtraq&m=126583436323697&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.vupen.com/english/advisories/2008/3339
Tags : vdb-entry, x_refsource_VUPEN

http://marc.info/?l=bugtraq&m=123678756409861&w=2
Tags : vendor-advisory, x_refsource_HP

http://www.redhat.com/support/errata/RHSA-2009-0445.html
Tags : vendor-advisory, x_refsource_REDHAT

http://sunsolve.sun.com/search/document.do?assetkey=1-26-244991-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.redhat.com/support/errata/RHSA-2009-0016.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.us-cert.gov/cas/techalerts/TA08-340A.html
Tags : third-party-advisory, x_refsource_CERT

http://secunia.com/advisories/33709
Tags : third-party-advisory, x_refsource_SECUNIA

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=829914&poid=
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/34605
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.redhat.com/support/errata/RHSA-2009-0015.html
Tags : vendor-advisory, x_refsource_REDHAT

http://secunia.com/advisories/35118
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2009/1391
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/32991
Tags : third-party-advisory, x_refsource_SECUNIA

http://osvdb.org/50500
Tags : vdb-entry, x_refsource_OSVDB

http://www.securityfocus.com/bid/32608
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/37386
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/33710
Tags : third-party-advisory, x_refsource_SECUNIA

날짜	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	82.8%	–	–
2022-02-13	–	–	82.8%	–	–
2023-03-12	–	–	–	97.15%	–
2023-04-30	–	–	–	97.19%	–
2023-07-09	–	–	–	97.22%	–
2024-01-28	–	–	–	97.13%	–
2024-03-03	–	–	–	97.1%	–
2024-04-07	–	–	–	97.12%	–
2024-06-02	–	–	–	97.12%	–
2024-06-16	–	–	–	97.07%	–
2024-07-21	–	–	–	97.06%	–
2024-09-01	–	–	–	97.09%	–
2024-12-15	–	–	–	97.01%	–
2024-12-22	–	–	–	96.9%	–
2025-01-19	–	–	–	97.06%	–
2025-01-19	–	–	–	97.06%	–
2025-03-02	–	–	–	97.04%	–
2025-03-09	–	–	–	97.04%	–
2025-03-18	–	–	–	–	91.37%
2025-04-22	–	–	–	–	91.29%
2025-07-01	–	–	–	–	89.06%
2025-07-02	–	–	–	–	89.19%
2025-07-05	–	–	–	–	89.19%
2025-07-07	–	–	–	–	89.19%
2025-12-08	–	–	–	–	90.12%
2026-03-01	–	–	–	–	90.06%
2026-03-15	–	–	–	–	89.54%

날짜	백분위수
2022-02-06	99%
2022-02-13	1%
2023-03-12	1%
2023-04-30	1%
2023-07-09	1%
2024-01-28	1%
2024-03-03	1%
2024-04-07	1%
2024-06-02	1%
2024-06-16	1%
2024-07-21	1%
2024-09-01	1%
2024-12-15	1%
2024-12-22	1%
2025-01-19	1%
2025-01-19	1%
2025-03-02	1%
2025-03-09	1%
2025-03-18	1%
2025-04-22	1%
2025-07-01	1%
2025-07-02	1%
2025-07-05	99%
2025-07-07	1%
2025-12-08	1%
2026-03-01	1%
2026-03-15	1%

CVE-2008-5353 : 상세 정보

CVE-2008-5353