GitHub Advisoryadvisory · Maven

GHSA-xh22-fw58-56pp Robocode Arbitrary Code Execution

MEDIUM Published 2022-05-01 Modified 2023-09-21 Official page ↗
Aliases
CVE-2007-6382
Ecosystem
Maven
Packages
net.sf.robocode:robocode.core
Severity
Moderate
Weaknesses
CWE-94
Reviewed
2023-09-21

Affected packages

• Maven net.sf.robocode:robocode.core: < 1.5.1 → fixed in 1.5.1

Description

The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the `SwingUtilities.invokeLater` method.

Related

Alias · CVE (1)

  • CVE-2007-6382 The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the… vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References