Unscored severity · published Nov 16, 2005
CVE-2005-3583
(1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote attackers to cause a denial of…
–
CVSS
2.9%
EPSS
No
On KEV
Description
(1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote attackers to cause a denial of service (JVM unresponsive) via a crafted serialized object, such as a font object as demonstrated on JBoss.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3583
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3583
marc.info
http://marc.info/?l=bugtraq&m=113113125121878&w=2
Vendor Advisory
http://secunia.com/advisories/17478/
securityreason.com
http://securityreason.com/securityalert/143
www.securityfocus.com
http://www.securityfocus.com/bid/15312
More from Jre
9.8
CVE-2013-2465
Oracle Java SE Unspecified Vulnerability
9.8
CVE-2012-0507
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
6.8
CVE-2012-1695
Unspecified vulnerability in the Oracle JRockit component in Oracle Fusion Middleware 28.2.2 and earlier, and JDK/JRE 5 and 6 27.7.1 and earlier, allows remote attackers to affect…
–
CVE-2013-5852
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality,…
–
CVE-2013-5850
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers…