CVEvulnerability

CVE-2011-3387

4.0 MEDIUM Published 2011-09-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-09-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-20

Description

The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311.

Affected configurations

• ibm java 1.4.2.13.9

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References