PT-2005-4644 · Oracle · Java Jdk+1

Adam Gowdiak · Published 2005-11-30 · Updated 2018-10-30 · CVE-2005-3904

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Java JDK and JRE versions 1.3.1 and later, 1.4.2 and later, 5.0 Update 3

Description The issue allows remote attackers to escape the Java sandbox, potentially accessing arbitrary files or executing arbitrary applications. The exact attack vectors are not specified.

Recommendations For Java JDK and JRE versions 1.3.1 and later, 1.4.2 and later, 5.0 Update 3, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2005-3904

Affected Products

Java Jdk

Java Jre

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2005-3904 · Security Note
• http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html · Vendor Advisory
• http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102017-1 · Vendor Advisory
• http://secunia.com/advisories/17748 · Vendor Advisory
• http://vupen.com/english/advisories/2005/2675 · Note
• http://secunia.com/advisories/18503 · Note
• http://secunia.com/advisories/17847 · Note
• http://vupen.com/english/advisories/2005/2946 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23252 · Note
• http://www-1.ibm.com/support/docview.wss?uid=swg21225628 · Note
• http://kb.cert.org/vuls/id/931684 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3904 · Note
• http://secunia.com/advisories/18092 · Note
• http://securitytracker.com/id?1015281 · Note
• http://vupen.com/english/advisories/2005/2636 · Note