CVE-2011-3387: Input Validation
The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3387?
CVE-2011-3387 has a moderate severity rating due to its potential to cause denial of service through memory exhaustion or infinite loops.
How do I fix CVE-2011-3387?
To remediate CVE-2011-3387, it is advised to update IBM Java to a patched version beyond 1.4.2 SR13 FP9.
Who is affected by CVE-2011-3387?
CVE-2011-3387 affects users running IBM Java version 1.4.2 SR13 FP9.
What kind of attack does CVE-2011-3387 enable?
CVE-2011-3387 enables remote authenticated users to launch denial of service attacks due to improper handling of class file attributes.
What systems are vulnerable to CVE-2011-3387?
Systems using IBM Java 1.4.2 SR13 FP9 are vulnerable to CVE-2011-3387.