CWE Code: 189
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Numeric Errors
Summary: integer overflow in the jar unpacking utility (unpack200) in the unpack library (unpack.dll) in java runtime environment (jre) for sun jdk and jre 6 update 10 and earlier, and jdk and jre 5.0 update 16 and earlier, allows untrusted applications and applets to gain privileges via a pack200 compressed jar file that triggers a heap-based buffer overflow.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2008-12-05
Last Modified Date: 2017-09-29