Lucene search
HistoryNov 16, 2005 - 7:42 a.m.
CVE-2005-3583
cve-2005-3583
java runtime environment
sdk
denial of service
serialized object
jboss
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
7.1 High
AI Score
Confidence
High
0.278 Low
EPSS
Percentile
96.8%
(1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote attackers to cause a denial of service (JVM unresponsive) via a crafted serialized object, such as a font object as demonstrated on JBoss.
Affected configurations
Node
sunjreMatch1.4.2
ORsunsdkMatch1.4.2_08
ORsunsdkMatch1.4.2_09
ORsunsdkMatch1.5.0_05
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
7.1 High
AI Score
Confidence
High
0.278 Low
EPSS
Percentile
96.8%
Related for CVE-2005-3583