PT-2005-4647 · Oracle · Java Jdk+1

Adam Gowdiak · Publicado 2005-11-30 · Atualizado 2018-10-30 · CVE-2005-3907

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java JDK and JRE versions 5.0 Update 3 and earlier

Description The issue allows remote attackers to escape the Java sandbox, potentially accessing arbitrary files or executing arbitrary applications. This is achieved through unknown attack vectors involving untrusted Java applets.

Recommendations For Java JDK and JRE versions 5.0 Update 3 and earlier, update to a version later than 5.0 Update 3 to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-3907

Produtos afetados

Java Jdk

Java Jre

Referências · 13

• http://secunia.com/advisories/18092 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2675 · Aviso do Fabricante
• http://secunia.com/advisories/17748 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3907 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3907 · Nota de Segurança
• http://securityfocus.com/bid/15615 · Nota
• http://vupen.com/english/advisories/2005/2636 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23250 · Nota
• http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102050-1 · Aviso do Fabricante
• http://secunia.com/advisories/17847 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/355284 · Nota
• http://securitytracker.com/id?1015282 · Nota
• http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html · Aviso do Fabricante