First published: Sun Feb 06 2005(Updated: )
The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang) via object deserialization.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Java Development Kit (JDK) | =1.4.2 | |
Oracle Sun Ray Software | =1.4.1 | |
Java Development Kit (JDK) | =1.4.1 | |
Oracle Sun Ray Software | =1.4.2 | |
Compaq Tru64 UNIX |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0223 is a medium severity vulnerability that can lead to denial of service by causing the Java Virtual Machine to hang.
To remediate CVE-2005-0223, users should upgrade the Sun SDK and RTE to versions higher than 1.4.2.
Users of Sun SDK versions 1.4.1 and 1.4.2, as well as Sun RTE versions 1.4.1 and 1.4.2 on Tru64 UNIX, are affected by this vulnerability.
CVE-2005-0223 can be exploited via remote attacks that leverage object deserialization to hang the Java Virtual Machine.
While CVE-2005-0223 is an older vulnerability, it remains a concern for systems that have not been updated to mitigate the issue.