CVE-2005-3907 Security feature bypass in n/a

High 7.5 Published 30 Nov 2005 Updated 7 Aug 2024

Remote attackers can escape the Java sandbox via untrusted applets to execute arbitrary code or access files, requiring user interaction to load the applet.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2005-3907?

CVE-2005-3907 is a high-severity vulnerability in Sun Jdk, published on 30 Nov 2005. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.

Which versions are affected by CVE-2005-3907?

It affects 2 products.

Products include Sun Jdk, Sun Jre.

How do I fix CVE-2005-3907?

No fix has been published for CVE-2005-3907 yet. Limit exposure of the affected software until one is available.

Is CVE-2005-3907 being exploited?

There is no known exploitation of CVE-2005-3907 in the wild and no public exploit code.

All Sun Jdk vulnerabilities

Sources

Also known as GHSA-wg5j-8jqj-w57c.