GCVE - cpe:2.3:a:sun:jdk:1.5.0_03:*:solaris:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jdk:1.5.0_03:*:solaris:*:*:*:*:*

part: a version: 1.5.0_03 update: *

Vendor	Sun (`f793a52f-9733-5503-ba70-29fa391cdd2b`)
Product	Jdk (`86ca1592-c9ed-54c6-9315-e1ffda84ce5b`)
Edition	solaris
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-1190`	vulnerable	2026-06-08 04:51:13.677096	Details available Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to cause a denial of service (CPU consumption) via serializable data with a long regex string containing multiple optional groups, a related issue to CVE-2004-2540. Published: 2009-04-27T22:00:00.000Z Updated: 2024-08-07T05:04:49.369Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/502926/100/0/threaded http://www.packetstormsecurity.org/hitb06/DAY_1_-_Marc_Schoenefeld_-_Pentesting_Java_J2EE.pdf https://exchange.xforce.ibmcloud.com/vulnerabilities/50083 https://bugzilla.redhat.com/show_bug.cgi?id=497161 http://www.springsource.com/securityadvisory	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3907`	vulnerable	2026-06-08 04:48:42.494826	Details available Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets. Published: 2005-11-30T11:00:00.000Z Updated: 2024-08-07T23:31:47.860Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/355284 http://secunia.com/advisories/17847 http://www.securityfocus.com/bid/15615 http://securitytracker.com/id?1015282 http://www.vupen.com/english/advisories/2005/2675	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3906`	vulnerable	2026-06-08 04:48:42.493810	Details available Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors, a different set of vulnerabilities than CVE-2005-3905. NOTE: this is associated with the "second and third issues" identified in SUNALERT:102003. Published: 2005-11-30T11:00:00.000Z Updated: 2024-08-07T23:31:47.998Z Open on db.gcve.eu Reference links http://secunia.com/advisories/17847 http://secunia.com/advisories/18503 http://secunia.com/advisories/18435 http://www.securityfocus.com/bid/15615 http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102003-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3905`	vulnerable	2026-06-08 04:48:42.490710	Details available Unspecified vulnerability in reflection APIs in Java SDK and JRE 1.3.1_15 and earlier, 1.4.2_08 and earlier, and JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors, a different vulnerability than CVE-2005-3906. NOTE: this is associated with the "first issue" identified in SUNALERT:102003. Published: 2005-11-30T11:00:00.000Z Updated: 2024-08-07T23:31:47.866Z Open on db.gcve.eu Reference links http://secunia.com/advisories/17847 http://secunia.com/advisories/18503 http://secunia.com/advisories/18435 http://www.securityfocus.com/bid/15615 http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102003-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3904`	vulnerable	2026-06-08 04:48:42.410426	Details available Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors. Published: 2005-11-30T11:00:00.000Z Updated: 2024-08-07T23:31:47.865Z Open on db.gcve.eu Reference links http://secunia.com/advisories/17847 http://secunia.com/advisories/18503 http://www.securityfocus.com/bid/15615 http://www.vupen.com/english/advisories/2005/2946 http://www.vupen.com/english/advisories/2005/2675	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.