PT-2005-4644 · Oracle · Java Jdk+1

Adam Gowdiak · Publicado 2005-11-30 · Atualizado 2018-10-30 · CVE-2005-3904

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java JDK and JRE versions 1.3.1 and later, 1.4.2 and later, 5.0 Update 3

Description The issue allows remote attackers to escape the Java sandbox, potentially accessing arbitrary files or executing arbitrary applications. The exact attack vectors are not specified.

Recommendations For Java JDK and JRE versions 1.3.1 and later, 1.4.2 and later, 5.0 Update 3, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2005-3904

Produtos afetados

Java Jdk

Java Jre

Referências · 16

• http://vupen.com/english/advisories/2005/2675 · Nota
• http://secunia.com/advisories/18503 · Nota
• http://secunia.com/advisories/17847 · Nota
• http://vupen.com/english/advisories/2005/2946 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23252 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3904 · Nota de Segurança
• http://www-1.ibm.com/support/docview.wss?uid=swg21225628 · Nota
• http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html · Aviso do Fabricante
• http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102017-1 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/931684 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3904 · Nota
• http://secunia.com/advisories/18092 · Nota
• http://secunia.com/advisories/17748 · Aviso do Fabricante
• http://securitytracker.com/id?1015281 · Nota
• http://vupen.com/english/advisories/2005/2636 · Nota