CVE-2005-3583

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-16 · updated 2026-06-16

Description

(1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote attackers to cause a denial of service (JVM unresponsive) via a crafted serialized object, such as a font object as demonstrated on JBoss.

Affected products

Sun Jre: 1.4.2
Sun Sdk: 1.4.2_08, 1.4.2_09, 1.5.0_05

References

http://marc.info/?l=bugtraq&m=113113125121878&w=2
http://secunia.com/advisories/17478/
http://securityreason.com/securityalert/143
http://www.securityfocus.com/bid/15312
http://marc.info/?l=bugtraq&m=113113125121878&w=2
http://secunia.com/advisories/17478/
http://securityreason.com/securityalert/143
http://www.securityfocus.com/bid/15312

Get alerted when CVE-2005-3583 or the next vulnerability affects your stack