CVE-2007-6382

EPSS 0.82%

Robocode Arbitrary Code Execution

Published: 5/1/2022Modified: 11/8/2023

Description

The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the `SwingUtilities.invokeLater` method.

Affected packages (1)

Maven/net.sf.robocode:robocode.corefrom 0, < 1.5.1

References (6)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2007-6382
PATCHhttps://github.com/robo-code/robocode
WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/39019
WEBhttps://github.com/robo-code/robocode/blob/1abe65b65c34a8eb3d23de8f037dafae3c548fa5/versions.md?plain=1#L1880-L1887
WEBhttps://github.com/robo-code/robocode/commit/2f2867d24fb28a2478983be57556f2355a774a81
WEBhttps://github.com/robo-code/robocode/commit/8c6f5d77e7723583ba069ea611c33f22c1e9603a