CVE-2011-0311: Buffer Overflow
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0311?
CVE-2011-0311 has a high severity rating as it allows for denial of service attacks.
How do I fix CVE-2011-0311?
To fix CVE-2011-0311, upgrade IBM Java to the latest version that is not affected by this vulnerability.
Which software versions are affected by CVE-2011-0311?
CVE-2011-0311 affects IBM Java versions before 1.4.2 SR13 FP9 and specific versions of IBM Runtimes for Java Technology.
What types of attacks can exploit CVE-2011-0311?
CVE-2011-0311 can be exploited to cause a segmentation fault and potentially lead to memory consumption or infinite loops.
Who can exploit CVE-2011-0311?
CVE-2011-0311 can be exploited by remote authenticated users.