CVE-2005-3907
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and...
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.
Exploit likelihood
What each source reports
NVD Score used
7.5
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.
- Record
CVE-2005-3907- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.
- Record
CVE-2005-3907- Updated
- 2026-11-02
EUVDEUVD-2005-3902 No score
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.
- Record
EUVD-2005-3902- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wg5j-8jqj-w57c No score
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and...
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.
- Record
GHSA-wg5j-8jqj-w57c- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3907 is a high vulnerability (CVSS 7.5) in Sun Jdk, published November 30, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.63%, the 91st percentile. No source names a fixed version.
References
kb.cert.org/vuls/id/355284
secunia.com/advisories/17847
securityfocus.com/bid/15615
securitytracker.com/id?1015282
vupen.com/english/advisories/2005/2675
vupen.com/english/advisories/2005/2636
Show 7 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/23250
sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102050-1
lists.apple.com/archives/security-announce/2005/Nov/msg00004.html
secunia.com/advisories/17748
secunia.com/advisories/18092
nvd.nist.gov/vuln/detail/CVE-2005-3907
github.com/advisories/GHSA-wg5j-8jqj-w57c