CVE-2005-3907

Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-11-30

Last modified

2024-08-07

Affected products

• Jdk (Sun)
• Jre (Sun)

References

• http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html
• http://secunia.com/advisories/17748
• http://secunia.com/advisories/17847
• http://secunia.com/advisories/18092
• http://securitytracker.com/id?1015282
• http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102050-1
• http://www.kb.cert.org/vuls/id/355284
• http://www.securityfocus.com/bid/15615
• http://www.vupen.com/english/advisories/2005/2636
• http://www.vupen.com/english/advisories/2005/2675
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23250