Unspecified Reflection API Vulnerabilities in Java SDK and JRE

CVE-2005-3906 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors, a different set of vulnerabilities than CVE-2005-3905. NOTE: this is associated with the "second and third issues" identified in SUNALERT:102003.

Learn more about our Api Penetration Testing.