First published: Wed Nov 30 2005(Updated: )
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sun JRE | =1.4.2_7 | |
Sun JRE | =1.3.1 | |
Sun JRE | =1.3.1-update1a | |
Sun JRE | =1.5.0 | |
Sun JRE | =1.4.2_4 | |
Sun JRE | =1.3.0-update1 | |
Sun JRE | =1.4.2_2 | |
Sun JRE | =1.5.0-update2 | |
Sun JRE | =1.3.0-update4 | |
Sun JRE | =1.3.1-update8 | |
Sun JRE | =1.4.2_1 | |
Sun JRE | =1.4.2_8 | |
Sun JRE | =1.3.1-update1 | |
Sun JRE | =1.3.0-update5 | |
Sun JRE | =1.3.1-update4 | |
Sun JDK | =1.5.0_03 | |
Sun JRE | =1.5.0-update3 | |
Sun JRE | =1.3.0 | |
Sun JDK | =1.5.0_03 | |
Sun JRE | =1.3.0-update2 | |
Sun JRE | =1.3.0-update3 | |
Sun JRE | =1.4.2 | |
Sun JRE | =1.3.1-update15 | |
Sun JRE | =1.5.0-update1 | |
Sun JRE | =1.4.1 | |
Sun JDK | =1.5.0_03 | |
Sun JRE | =1.4.2_3 | |
Sun JRE | =1.4.2_5 | |
Sun JRE | =1.4.2_6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-3907 is considered to be a high-severity vulnerability as it allows remote attackers to execute arbitrary code.
To fix CVE-2005-3907, update your Java Runtime Environment or Java Development Kit to the latest version provided by the vendor.
CVE-2005-3907 affects Java JDK and JRE 5.0 Update 3 and earlier, as well as multiple earlier versions of Java.
CVE-2005-3907 allows attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications through untrusted Java applets.
Any system running the affected versions of Java JDK or JRE, particularly in a web environment, is vulnerable to CVE-2005-3907.