Vulnerability in Sun Jdk

CVE-2005-3905

Unspecified vulnerability in reflection APIs in Java SDK and JRE 1.3.1_15 and earlier, 1.4.2_08 and earlier, and JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors, a different vulnerability than CVE-2005-3906. NOTE: this is associated with the "first issue" identified in SUNALERT:102003.

EPSS: 0.052 (91.6th percentile) — read the EPSS interpretation.

Affected products

  • Sun Jdk — versions 1.3, 1.3.0_02, 1.3.0_05
  • Sun Jre — versions 1.3.0, 1.3.1, 1.4.1
  • N/a — versions n/a

References