CVE-2005-3904

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-30 · updated 2026-06-16

Description

Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.

Affected products

Sun Jdk: 1.5.0_03
Sun Jre: 1.3.0, 1.3.0-update1, 1.3.0-update2, 1.3.0-update3, 1.3.0-update4, 1.3.0-update5 (+20)

References

http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html
http://secunia.com/advisories/17748
http://secunia.com/advisories/17847
http://secunia.com/advisories/18092
http://secunia.com/advisories/18503
http://securitytracker.com/id?1015281
http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102017-1
http://www-1.ibm.com/support/docview.wss?uid=swg21225628
http://www.kb.cert.org/vuls/id/931684
http://www.securityfocus.com/bid/15615
http://www.vupen.com/english/advisories/2005/2636
http://www.vupen.com/english/advisories/2005/2675

Get alerted when CVE-2005-3904 or the next vulnerability affects your stack