CVE-2005-3906

no score yetEPSS 5.2%

Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors, a different set of vulnerabilities than CVE-2005-3905. NOTE: this is associated with the "second and third issues" identified in SUNALERT:102003.

EPSS: 5.2% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
Published: 2005-11-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sun:jdk
sun:jre

References

http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html
http://secunia.com/advisories/17748
http://secunia.com/advisories/17847
http://secunia.com/advisories/18092
http://secunia.com/advisories/18435

Check your stack JSON