CVE-2008-5349: Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, an...

Security readout for executives and security teams

This issue affects older Sun Java runtimes and can let a remote attacker consume excessive CPU by presenting a crafted RSA public key. The supplied record describes denial of service, not data theft or code execution. Business urgency depends on whether legacy Java 5 or Java 6 runtimes remain in exposed applications. Likely exposure is limited to systems still running the affected legacy Sun Java versions, especially services or applets that process attacker-controlled RSA public keys, certificates, or cryptographic inputs. Treat as a legacy exposure cleanup item with moderate urgency. Prioritize internet-facing or business-critical Java services first, then remove unsupported runtimes from the estate. Mitigation focus: Inventory Java runtimes and identify affected Sun JDK/JRE versions.; Apply relevant vendor Java or OS security updates from your platform vendor.; Retire or isolate unsupported Java 5 and early Java 6 deployments..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.