CVEvulnerability

CVE-2005-3906

7.5 HIGH Published 2005-11-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-11-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors, a different set of vulnerabilities than CVE-2005-3905. NOTE: this is associated with the "second and third issues" identified in SUNALERT:102003.

Affected configurations

• sun jdk 1.3 • sun jdk 1.3.0 02 • sun jdk 1.3.0 05 • sun jdk 1.3.1 01 • sun jdk 1.3.1 01a • sun jdk 1.3.1 02 • sun jdk 1.3.1 03 • sun jdk 1.3.1 04 • sun jdk 1.3.1 05 • sun jdk 1.3.1 06 • sun jdk 1.3.1 07 • sun jdk 1.3.1 08 • sun jdk 1.3.1 09 • sun jdk 1.3.1 10 • sun jdk 1.3.1 11 • sun jdk 1.3.1 12 • sun jdk 1.3.1 13 • sun jdk 1.3.1 14 • sun jdk 1.3.1 15 • sun jdk 1.3 02 • sun jdk 1.3 05 • sun jdk 1.4 • sun jdk 1.4.0 01 • sun jdk 1.4.0 02 • sun jdk 1.4.0 03 • sun jdk 1.4.0 4 • sun jdk 1.4.1 • sun jdk 1.4.1 01 • sun jdk 1.4.1 02 • sun jdk 1.4.1 03 • sun jdk 1.4.2 • sun jdk 1.4.2 01 • sun jdk 1.4.2 02 • sun jdk 1.4.2 03 • sun jdk 1.4.2 04 • sun jdk 1.4.2 05 • sun jdk 1.4.2 08 • sun jdk 1.5.0 03 • sun jre 1.3.0 • sun jre 1.3.1 • sun jre 1.4.1 • sun jre 1.4.2 • sun jre 1.4.2 1 • sun jre 1.4.2 2 • sun jre 1.4.2 3 • sun jre 1.4.2 4 • sun jre 1.4.2 5 • sun jre 1.4.2 6 • sun jre 1.4.2 7 • sun jre 1.4.2 8 • sun jre 1.5.0

References