CVE ID:	CVE-2008-3109
Description:	Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3109 http://lists.apple.com/archives/security-announce//2008/Sep/msg00007.html BugTraq ID: 30144 http://www.securityfocus.com/bid/30144 Bugtraq: 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and (Google Search) http://marc.info/?l=bugtraq&m=122331139823057&w=2 Bugtraq: 20081004 VMSA-2008-0016 VMware Hosted products, VirtualCenter Update 3 and patches for ESX and ESXi resolve multiple security issues (Google Search) http://www.securityfocus.com/archive/1/497041/100/0/threaded Cert/CC Advisory: TA08-193A http://www.us-cert.gov/cas/techalerts/TA08-193A.html http://security.gentoo.org/glsa/glsa-200911-02.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8540 RedHat Security Advisories: RHSA-2008:0594 http://www.redhat.com/support/errata/RHSA-2008-0594.html RedHat Security Advisories: RHSA-2008:0906 http://www.redhat.com/support/errata/RHSA-2008-0906.html RedHat Security Advisories: RHSA-2008:1045 http://www.redhat.com/support/errata/RHSA-2008-1045.html http://www.securitytracker.com/id?1020456 http://secunia.com/advisories/31010 http://secunia.com/advisories/31600 http://secunia.com/advisories/32018 http://secunia.com/advisories/32179 http://secunia.com/advisories/32180 http://secunia.com/advisories/32436 http://secunia.com/advisories/33238 http://secunia.com/advisories/37386 http://sunsolve.sun.com/search/document.do?assetkey=1-66-238687-1 SuSE Security Announcement: SUSE-SA:2008:042 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00005.html http://www.vupen.com/english/advisories/2008/2056/references http://www.vupen.com/english/advisories/2008/2740 XForce ISS Database: sun-jre-scripting-unauth-access(43660) https://exchange.xforce.ibmcloud.com/vulnerabilities/43660