GitHub Advisoryadvisory · Maven
GHSA-xh22-fw58-56pp Robocode Arbitrary Code Execution
MEDIUM
Official page ↗
- Aliases
- CVE-2007-6382
- Ecosystem
- Maven
- Packages
- net.sf.robocode:robocode.core
- Severity
- Moderate
- Weaknesses
- CWE-94
- Reviewed
- 2023-09-21
Affected packages
• Maven net.sf.robocode:robocode.core: < 1.5.1 → fixed in 1.5.1
Description
The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the `SwingUtilities.invokeLater` method.
Related
Alias · CVE (1)
- CVE-2007-6382 The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the… vulnerability
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2007-6382 advisory
- https://github.com/robo-code/robocode/commit/2f2867d24fb28a2478983be57556f2355a774a81 web
- https://github.com/robo-code/robocode/commit/8c6f5d77e7723583ba069ea611c33f22c1e9603a web
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39019 web
- https://github.com/robo-code/robocode package
- https://github.com/robo-code/robocode/blob/1abe65b65c34a8eb3d23de8f037dafae3c548fa5/versions.md?plain=1#L1880-L1887 web