CVE Database
/

CVE-2011-3387

Back to search

CVE-2011-3387

Published: Sep 2, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311.

VendorProductVersions

n/a

n/a

affected
n/a

References

ibm-java-class-file-dos(69641)
vdb-entry
x_refsource_XF
PM42551
vendor-advisory
x_refsource_AIXAPAR
RHSA-2011:1265
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now