CVE-2005-3905: Sun JDK

High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in reflection APIs in Java SDK and JRE 1.3.1_15 and earlier, 1.4.2_08 and earlier, and JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors, a different vulnerability than CVE-2005-3906. NOTE: this is associated with the "first issue" identified in SUNALERT:102003.

Affected products

• Sun JDK: version 1.3 only; version 1.3.0_02 only; version 1.3.0_05 only; version 1.3.1_01 only; version 1.3.1_01a only; version 1.3.1_02 only; …
• Sun JRE: version 1.3.0 only; version 1.3.1 only; version 1.4.1 only; version 1.4.2 only; version 1.4.2_1 only; version 1.4.2_2 only; …

Published 2005-11-30. Last modified 2026-06-16.