CVE-2011-3387

Published: Sep 2, 2011Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311.

Affected (1)

Products: Ibm: Java

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Java	Version 1.4.2.13.9

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://www.redhat.com/support/errata/RHSA-2011-1265.html

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/69641

Source: cve@mitre.org

https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2011-1265.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/69641

Source: af854a3a-2127-422b-91ae-364da2661108

https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.