CVE-2005-3907
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and...
CVE-2005-3907 is a high vulnerability (CVSS 7.5) in Sun Jdk, published November 30, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.63%, the 91st percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 4.63%EPSS, 91st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.
- Record
CVE-2005-3907- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.
- Record
CVE-2005-3907- Updated
- 2026-11-02
EUVDEUVD-2005-3902No score
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.
- Record
EUVD-2005-3902- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wg5j-8jqj-w57cNo score
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and...
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.
- Record
GHSA-wg5j-8jqj-w57c- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
kb.cert.org/vuls/id/355284
secunia.com/advisories/17847
securityfocus.com/bid/15615
securitytracker.com/id?1015282
vupen.com/english/advisories/2005/2675
Show 7 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/23250
sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102050-1
lists.apple.com/archives/security-announce/2005/Nov/msg00004.html
nvd.nist.gov/vuln/detail/CVE-2005-3907
github.com/advisories/GHSA-wg5j-8jqj-w57c