Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors, a different set of vulnerabilities than CVE-2005-3905. NOTE: this is associated with the "second and third issues" identified in SUNALERT:102003.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-java/blackdown-jdk.Upgrade dev-java/sun-jre-bin.Upgrade dev-java/blackdown-jre.Upgrade dev-java/sun-jdk. | Oct 30, 2017 | Nov 30, 2005 |
| Suse | — | Upgrade IBMJava2-JREUpgrade java2-jreUpgrade java2Upgrade IBMJava2-SDK | Feb 17, 2015 | Nov 30, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub