CVE-2011-0311

Published: Sep 2, 2011Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.

Affected (30)

Products: Ibm: Java, Runtimes For Java Technology

Ibm

2 products

Java

Runtimes For Java Technology

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Ibm Java	Up to 1.4.2.13.8
Ibm Java	Version 1.4.2.13.1
Ibm Java	Version 1.4.2.13.2
Ibm Java	Version 1.4.2.13.3
Ibm Java	Version 1.4.2.13.4
Ibm Java	Version 1.4.2.13.5
Ibm Java	Version 1.4.2.13.6
Ibm Java	Version 1.4.2.13.7
Ibm Java	Version 1.4.2.13
Ibm Java	Version 1.4.2
Ibm Runtimes For Java Technology	Up to 5.0.12.4
Ibm Runtimes For Java Technology	Up to 6.0.9.0
Ibm Runtimes For Java Technology	Version 5.0.0
Ibm Runtimes For Java Technology	Version 5.0.11.0
Ibm Runtimes For Java Technology	Version 5.0.11.1
Ibm Runtimes For Java Technology	Version 5.0.11.2
Ibm Runtimes For Java Technology	Version 5.0.12.0
Ibm Runtimes For Java Technology	Version 5.0.12.1
Ibm Runtimes For Java Technology	Version 5.0.12.2
Ibm Runtimes For Java Technology	Version 5.0.12.3
Ibm Runtimes For Java Technology	Version 6.0.0
Ibm Runtimes For Java Technology	Version 6.0.1.0
Ibm Runtimes For Java Technology	Version 6.0.2.0
Ibm Runtimes For Java Technology	Version 6.0.3.0
Ibm Runtimes For Java Technology	Version 6.0.4.0
Ibm Runtimes For Java Technology	Version 6.0.5.0
Ibm Runtimes For Java Technology	Version 6.0.6.0
Ibm Runtimes For Java Technology	Version 6.0.7.0
Ibm Runtimes For Java Technology	Version 6.0.8.0
Ibm Runtimes For Java Technology	Version 6.0.8.1