--- title: "CVE-2008-3109\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2008-3109?format=md keywords: index, follow --- # CVE-2008-3109 Publication date 9 July 2008 Last updated 17 July 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted (1) application or (2) applet, as demonstrated by an application or applet that grants itself privileges to (a) read local files, (b) write to local files, or (c) execute local programs. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | sun-java5 | 9.10 karmic | Not in release | | 9.04 jaunty | Not affected | | 8.10 intrepid | Not affected | | 8.04 LTS hardy | Not affected | | 7.10 gutsy | Not affected | | 7.04 feisty | Not affected | | 6.06 LTS dapper | Not affected | | sun-java6 | 9.10 karmic | Not affected | | 9.04 jaunty | Not affected | | 8.10 intrepid | Not affected | | 8.04 LTS hardy | Fixed 6-17-0ubuntu1.8.04 | | 7.10 gutsy | Ignored end of life, was needs-triage | | 7.04 feisty | Ignored end of life, was needs-triage | | 6.06 LTS dapper | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3109) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2008-3109) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2008-3109) * [Debian](https://security-tracker.debian.org/tracker/CVE-2008-3109) ### Other references *