CVE-2011-0311
Published Sep 2, 2011
Last updated 7 years ago
Overview
- Description
- The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 3.5
- Impact score
- 2.9
- Exploitability score
- 6.8
- Vector string
- AV:N/AC:M/Au:S/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-119
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E576D33E-6CA1-4BAD-9D69-541D0F003DD7",
"versionEndIncluding": "1.4.2.13.8"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82F48415-7D29-488D-B0F0-21BBF67A8025"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "429E0F9B-63D2-46C1-9BB3-C0B91FC5A0B8"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D454628-6074-42C5-B2F4-8ABC5597746E"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC71A3DD-E08E-41FF-8443-5A75AD9F4FB1"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E09B43A6-87FB-4ECA-B837-469AA63FCED7"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55BD6A1E-8043-43AA-980D-8A277CE3CDB2"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8549B650-7862-4C3B-8F26-8D9EC490000E"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89D960CA-0065-44FE-83C4-F02119FEA7CF"
},
{
"criteria": "cpe:2.3:a:ibm:java:1.4.2.13.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2F28E80-A2FE-4985-8D02-06E6E10D8186"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F8563B4-D8A1-459D-BAEB-2463EF09159C",
"versionEndIncluding": "5.0.12.4"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "658DDD54-C861-4CDC-BC9C-6FE63D881114",
"versionEndIncluding": "6.0.9.0"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A56BF2F0-8CC0-429F-A5B6-C506FDC37093"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAB2F473-FB5D-41EA-A7AC-2C4A004DDD7B"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB6BA998-227B-4300-9741-C8F09B8947D3"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.11.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D37B94A5-87E9-4390-943A-39FAAD6A32C9"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.12.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D44117A-B0BD-4C50-B49D-E5F200ED1DDF"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.12.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EED69200-9C79-4A30-8E29-E084B1CDF62B"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.12.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15C93D05-FA19-48B4-815A-672658454A9E"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.12.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB48BEDD-B1B2-461A-934E-BDDE4AF3A233"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F6AE573-2EC7-4917-9686-89A98D123685"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58D8B506-16B1-4991-90B9-9CC9D3C07F7C"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71526367-0EF6-445E-805C-D53AB71A5885"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2880FA53-BC93-4D39-83E3-FB19AC89485D"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39C1392A-866A-4591-9ED4-D420383AC1D9"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57BEF1B1-E4BC-4D8C-A4FF-5CFDBEB9B454"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5265E83-947E-488C-B8D8-9934EE4872E9"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C917DA62-6953-4E72-87D5-F177665F9983"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80C5372D-3CED-4BA3-A155-CE2FFCCA1B62"
},
{
"criteria": "cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1403930-A2CA-4052-9BB8-096C218F8D7A"
}
],
"operator": "OR"
}
]
}
]