Vulnerability Details CVE-2005-3906
Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors, a different set of vulnerabilities than CVE-2005-3905. NOTE: this is associated with the "second and third issues" identified in SUNALERT:102003.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.115
EPSS Ranking 93.2%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2005-3906
-
-
cpe:2.3:a:sun:jdk:1.3.0_02
-
cpe:2.3:a:sun:jdk:1.3.0_05
-
cpe:2.3:a:sun:jdk:1.3.1_01
-
Sun
»
Jdk
»
Version: 1.3.1_01a
cpe:2.3:a:sun:jdk:1.3.1_01a
-
cpe:2.3:a:sun:jdk:1.3.1_02
-
cpe:2.3:a:sun:jdk:1.3.1_03
-
cpe:2.3:a:sun:jdk:1.3.1_04
-
cpe:2.3:a:sun:jdk:1.3.1_05
-
cpe:2.3:a:sun:jdk:1.3.1_06
-
cpe:2.3:a:sun:jdk:1.3.1_07
-
cpe:2.3:a:sun:jdk:1.3.1_08
-
cpe:2.3:a:sun:jdk:1.3.1_09
-
cpe:2.3:a:sun:jdk:1.3.1_10
-
cpe:2.3:a:sun:jdk:1.3.1_11
-
cpe:2.3:a:sun:jdk:1.3.1_12
-
cpe:2.3:a:sun:jdk:1.3.1_13
-
cpe:2.3:a:sun:jdk:1.3.1_14
-
cpe:2.3:a:sun:jdk:1.3.1_15
-
-
-
-
cpe:2.3:a:sun:jdk:1.4.0_01
-
cpe:2.3:a:sun:jdk:1.4.0_02
-
cpe:2.3:a:sun:jdk:1.4.0_03
-
cpe:2.3:a:sun:jdk:1.4.0_4
-
-
cpe:2.3:a:sun:jdk:1.4.1_01
-
cpe:2.3:a:sun:jdk:1.4.1_02
-
cpe:2.3:a:sun:jdk:1.4.1_03
-
-
cpe:2.3:a:sun:jdk:1.4.2_01
-
cpe:2.3:a:sun:jdk:1.4.2_02
-
cpe:2.3:a:sun:jdk:1.4.2_03
-
cpe:2.3:a:sun:jdk:1.4.2_04
-
cpe:2.3:a:sun:jdk:1.4.2_05
-
cpe:2.3:a:sun:jdk:1.4.2_08
-
cpe:2.3:a:sun:jdk:1.5.0_03
-
-
-
-
-
cpe:2.3:a:sun:jre:1.4.2_1
-
cpe:2.3:a:sun:jre:1.4.2_2
-
cpe:2.3:a:sun:jre:1.4.2_3
-
cpe:2.3:a:sun:jre:1.4.2_4
-
cpe:2.3:a:sun:jre:1.4.2_5
-
cpe:2.3:a:sun:jre:1.4.2_6
-
cpe:2.3:a:sun:jre:1.4.2_7
-
cpe:2.3:a:sun:jre:1.4.2_8
-