Unscored CVE-2005-3583 EUVD-2005-3582GHSA-pqxx-c8rf-4j52

(1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allo…

Published Nov 16, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

(1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote attackers to cause a denial of service (JVM unresponsive) via a crafted serialized object, such as a font object as demonstrated on JBoss.

References

143 third-party-advisory
20051104 Remotely DoSing JBoss 4.0.2 with serialized java objects mailing-list
15312 vdb-entry
17478 third-party-advisory