CVE-2005-0223: Medium severity Sun SDK vulnerability

Published Feb 6, 2005

Updated

The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang) via object deserialization.

Affected Software

5 affected components

Sun SDK=1.4.2

Sun Rte=1.4.1

Sun SDK=1.4.1

Sun Rte=1.4.2

Compaq Tru64

Event History

Feb 6, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-0223?

CVE-2005-0223 is a medium severity vulnerability that can lead to denial of service by causing the Java Virtual Machine to hang.

How do I fix CVE-2005-0223?

To remediate CVE-2005-0223, users should upgrade the Sun SDK and RTE to versions higher than 1.4.2.

Who is affected by CVE-2005-0223?

Users of Sun SDK versions 1.4.1 and 1.4.2, as well as Sun RTE versions 1.4.1 and 1.4.2 on Tru64 UNIX, are affected by this vulnerability.

What type of attack can exploit CVE-2005-0223?

CVE-2005-0223 can be exploited via remote attacks that leverage object deserialization to hang the Java Virtual Machine.

Is CVE-2005-0223 still a concern today?

While CVE-2005-0223 is an older vulnerability, it remains a concern for systems that have not been updated to mitigate the issue.