CVE-2005-3905: High severity Sun Java Runtime Environment (JRE) vulnerability

Published Nov 30, 2005
·
Updated

Unspecified vulnerability in reflection APIs in Java SDK and JRE 1.3.115 and earlier, 1.4.208 and earlier, and JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors, a different vulnerability than CVE-2005-3906. NOTE: this is associated with the "first issue" identified in SUNALERT:102003.

Affected Software

122 affected components
Sun Java Runtime Environment (JRE)=1.4.2_7
Sun Java Runtime Environment (JRE)=1.3.1
Java Development Kit (JDK)=1.4.0_4
Java Development Kit (JDK)=1.3.1_06
Sun Java Runtime Environment (JRE)=1.3.1-update1a
Java Development Kit (JDK)=1.4.1_03
Java Development Kit (JDK)=1.4.2_05
Java Development Kit (JDK)=1.4.0_02
Java Development Kit (JDK)=1.4.2_08
Sun Java Runtime Environment (JRE)=1.5.0
Java Development Kit (JDK)=1.4.2
Java Development Kit (JDK)=1.3.1_10
Java Development Kit (JDK)=1.3.1_13
Java Development Kit (JDK)=1.4.2
Java Development Kit (JDK)=1.3.1_02
Sun Java Runtime Environment (JRE)=1.4.2_4
Java Development Kit (JDK)=1.3.1_01
Java Development Kit (JDK)=1.3.1_02
Sun Java Runtime Environment (JRE)=1.3.0-update1
Java Development Kit (JDK)=1.3.0_05
Java Development Kit (JDK)=1.4.0_03
Java Development Kit (JDK)=1.3.0_02
Java Development Kit (JDK)=1.3.1_03
Sun Java Runtime Environment (JRE)=1.4.2_2
Java Development Kit (JDK)=1.4.1_02
Java Development Kit (JDK)=1.3.1_08
Java Development Kit (JDK)=1.3.1_07
Java Development Kit (JDK)=1.4
Sun Java Runtime Environment (JRE)=1.5.0-update2
Java Development Kit (JDK)=1.3.1_03
Java Development Kit (JDK)=1.3.1_14
Sun Java Runtime Environment (JRE)=1.3.0-update4
Sun Java Runtime Environment (JRE)=1.3.1-update8
Java Development Kit (JDK)=1.3.1_09
Java Development Kit (JDK)=1.3.1_12
Java Development Kit (JDK)=1.3.1_08
Java Development Kit (JDK)=1.4.2_01
Java Development Kit (JDK)=1.3.1_05
Java Development Kit (JDK)=1.4.2_04
Java Development Kit (JDK)=1.3.1_02
Sun Java Runtime Environment (JRE)=1.4.2_1
Sun Java Runtime Environment (JRE)=1.4.2_8
Java Development Kit (JDK)=1.4.1_02
Java Development Kit (JDK)=1.4.1
Java Development Kit (JDK)=1.4.2
Java Development Kit (JDK)=1.3.1_07
Java Development Kit (JDK)=1.3.1_03
Java Development Kit (JDK)=1.4.2_08
Java Development Kit (JDK)=1.4.2_03
Java Development Kit (JDK)=1.4.2_03
Java Development Kit (JDK)=1.3.1_10
Java Development Kit (JDK)=1.3.1_13
Java Development Kit (JDK)=1.3.1_15
Java Development Kit (JDK)=1.3.1_06
Java Development Kit (JDK)=1.4.0_01
Java Development Kit (JDK)=1.4.1_01
Java Development Kit (JDK)=1.4
Java Development Kit (JDK)=1.4.0_03
Java Development Kit (JDK)=1.3.1_05
Java Development Kit (JDK)=1.3.1_11
Java Development Kit (JDK)=1.4.0_02
Java Development Kit (JDK)=1.4.1_01
Java Development Kit (JDK)=1.3.1_07
Java Development Kit (JDK)=1.3_05
Java Development Kit (JDK)=1.3.1_10
Sun Java Runtime Environment (JRE)=1.3.1-update1
Java Development Kit (JDK)=1.4.1_03
Java Development Kit (JDK)=1.3.0_05
Sun Java Runtime Environment (JRE)=1.3.0-update5
Java Development Kit (JDK)=1.3.1_01a
Sun Java Runtime Environment (JRE)=1.3.1-update4
Java Development Kit (JDK)=1.3_02
Java Development Kit (JDK)=1.4.0_03
Java Development Kit (JDK)=1.5.0_03
Sun Java Runtime Environment (JRE)=1.5.0-update3
Java Development Kit (JDK)=1.4.2_04
Java Development Kit (JDK)=1.3.1_09
Java Development Kit (JDK)=1.3.1_12
Java Development Kit (JDK)=1.4.2_05
Sun Java Runtime Environment (JRE)=1.3.0
Java Development Kit (JDK)=1.5.0_03
Sun Java Runtime Environment (JRE)=1.3.0-update2
Sun Java Runtime Environment (JRE)=1.3.0-update3
Java Development Kit (JDK)=1.4.2_04
Java Development Kit (JDK)=1.3
Java Development Kit (JDK)=1.4.0_4
Java Development Kit (JDK)=1.4.1_03
Java Development Kit (JDK)=1.3.1_04
Sun Java Runtime Environment (JRE)=1.4.2
Java Development Kit (JDK)=1.3.1_05
Java Development Kit (JDK)=1.4.1
Java Development Kit (JDK)=1.3.0_02
Java Development Kit (JDK)=1.4.0_4
Java Development Kit (JDK)=1.3.1_13
Java Development Kit (JDK)=1.3.1_11
Sun Java Runtime Environment (JRE)=1.3.1-update15
Java Development Kit (JDK)=1.3.1_15
Sun Java Runtime Environment (JRE)=1.5.0-update1
Sun Java Runtime Environment (JRE)=1.4.1
Java Development Kit (JDK)=1.4.1
Java Development Kit (JDK)=1.4.2_02
Java Development Kit (JDK)=1.3.1_14
Java Development Kit (JDK)=1.3.1_15
Java Development Kit (JDK)=1.3.1_06
Java Development Kit (JDK)=1.3.1_14
Java Development Kit (JDK)=1.3.1_08
Java Development Kit (JDK)=1.3.1_12
Java Development Kit (JDK)=1.4.2_03
Java Development Kit (JDK)=1.4.1_02
Java Development Kit (JDK)=1.3.0_02
Java Development Kit (JDK)=1.3.1_09
Java Development Kit (JDK)=1.5.0_03
Sun Java Runtime Environment (JRE)=1.4.2_3
Java Development Kit (JDK)=1.3.1_01
Java Development Kit (JDK)=1.4.1_01
Java Development Kit (JDK)=1.3.1_11
Sun Java Runtime Environment (JRE)=1.4.2_5
Java Development Kit (JDK)=1.4
Java Development Kit (JDK)=1.4.0_02
Java Development Kit (JDK)=1.4.2_08
Java Development Kit (JDK)=1.4.2_05
Sun Java Runtime Environment (JRE)=1.4.2_6

Remediation

Patch Available

http://secunia.com/advisories/17748

Patch Available

http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102003-1

Event History

Nov 30, 2005
CVE Published
11:03 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2005-3905?

CVE-2005-3905 is considered a critical vulnerability due to its potential to allow remote attackers to escape the Java sandbox.

2

How do I fix CVE-2005-3905?

To fix CVE-2005-3905, it is recommended to upgrade to a later, patched version of the Java Runtime Environment or Java Development Kit.

3

What versions of Java are affected by CVE-2005-3905?

CVE-2005-3905 affects Java SDK and JRE versions 1.3.1_15 and earlier, 1.4.2_08 and earlier, and JDK and JRE 5.0 Update 3 and earlier.

4

What are the possible consequences of exploiting CVE-2005-3905?

Exploitation of CVE-2005-3905 may lead to unauthorized access to arbitrary files or the ability to execute arbitrary applications remotely.

5

Are there any known attack vectors for CVE-2005-3905?

The exact attack vectors for CVE-2005-3905 are unspecified, making it difficult to determine specific exploitation methods.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203