CVE-2005-3906: Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java…

Unscored severity · published Nov 30, 2005

CVE-2005-3906

Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java…

–

CVSS

5.2%

EPSS

On KEV

Description

Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors, a different set of vulnerabilities than CVE-2005-3905. NOTE: this is associated with the "second and third issues" identified in SUNALERT:102003.

Exploitation

Is it being used?

Exploit prediction (EPSS)5.2% · higher than 92% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Jdk · Sun

1.3; 1.3.0_02; 1.3.0_02; 1.3.0_02; 1.3.0_05; 1.3.0_05; +34 more · source: NVD

Jre · Sun

1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; +20 more · source: NVD