Vulnerability Details CVE-2005-3907
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.08
EPSS Ranking 91.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html
- http://secunia.com/advisories/17748
- http://secunia.com/advisories/17847
- http://secunia.com/advisories/18092
- http://securitytracker.com/id?1015282
- http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102050-1
- http://www.kb.cert.org/vuls/id/355284
- http://www.securityfocus.com/bid/15615
- http://www.vupen.com/english/advisories/2005/2636
- http://www.vupen.com/english/advisories/2005/2675
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23250
- http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html
- http://secunia.com/advisories/17748
- http://secunia.com/advisories/17847
- http://secunia.com/advisories/18092
- http://securitytracker.com/id?1015282
- http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102050-1
- http://www.kb.cert.org/vuls/id/355284
- http://www.securityfocus.com/bid/15615
- http://www.vupen.com/english/advisories/2005/2636
- http://www.vupen.com/english/advisories/2005/2675
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23250
Products affected by CVE-2005-3907
-
cpe:2.3:a:sun:jdk:1.5.0_03
-
cpe:2.3:a:sun:jre:1.3.0
-
cpe:2.3:a:sun:jre:1.3.1
-
cpe:2.3:a:sun:jre:1.4.1
-
cpe:2.3:a:sun:jre:1.4.2
-
cpe:2.3:a:sun:jre:1.4.2_1
-
cpe:2.3:a:sun:jre:1.4.2_2
-
cpe:2.3:a:sun:jre:1.4.2_3
-
cpe:2.3:a:sun:jre:1.4.2_4
-
cpe:2.3:a:sun:jre:1.4.2_5
-
cpe:2.3:a:sun:jre:1.4.2_6
-
cpe:2.3:a:sun:jre:1.4.2_7
-
cpe:2.3:a:sun:jre:1.4.2_8
-
cpe:2.3:a:sun:jre:1.5.0