First published: Wed Nov 16 2005(Updated: )
(1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote attackers to cause a denial of service (JVM unresponsive) via a crafted serialized object, such as a font object as demonstrated on JBoss.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sun SDK | =1.5.0_05 | |
Sun SDK | =1.4.2_09 | |
Sun JRE | =1.4.2 | |
Sun SDK | =1.4.2_08 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-3583 is classified as a denial of service vulnerability that can render the Java Virtual Machine unresponsive.
To mitigate CVE-2005-3583, it is advisable to update the Java Runtime Environment or Software Development Kit to a version that is not affected.
CVE-2005-3583 affects Java Runtime Environment versions 1.4.2_08, 1.4.2_09, and 1.5.0_05, among potentially other versions.
CVE-2005-3583 can be exploited by remote attackers using crafted serialized objects, such as specially designed font objects.
CVE-2005-3583 primarily affects older versions of the Java platform, and updating to current versions will eliminate the associated risks.