CVE-2011-0311 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2011-0311

Deferred

More Info Official Page

Source-cve@mitre.org

Published At-02 Sep, 2011 | 23:55

Updated At-11 Apr, 2025 | 00:51

The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	3.5	LOW	AV:N/AC:M/Au:S/C:N/I:N/A:P

Type: Primary

Version: 2.0

Base score: 3.5

Base severity: LOW

Vector:

AV:N/AC:M/Au:S/C:N/I:N/A:P

CPE Matches

IBM Corporation

>>java>>Versions up to 1.4.2.13.8(inclusive)

cpe:2.3:a:ibm:java:*:*:*:*:*:*:*:*

IBM Corporation

>>java>>1.4.2

cpe:2.3:a:ibm:java:1.4.2:*:*:*:*:*:*:*

IBM Corporation

>>java>>1.4.2.13

cpe:2.3:a:ibm:java:1.4.2.13:*:*:*:*:*:*:*

IBM Corporation

>>java>>1.4.2.13.1

cpe:2.3:a:ibm:java:1.4.2.13.1:*:*:*:*:*:*:*

IBM Corporation

>>java>>1.4.2.13.2

cpe:2.3:a:ibm:java:1.4.2.13.2:*:*:*:*:*:*:*

IBM Corporation

>>java>>1.4.2.13.3

cpe:2.3:a:ibm:java:1.4.2.13.3:*:*:*:*:*:*:*

IBM Corporation

>>java>>1.4.2.13.4

cpe:2.3:a:ibm:java:1.4.2.13.4:*:*:*:*:*:*:*

IBM Corporation

>>java>>1.4.2.13.5

cpe:2.3:a:ibm:java:1.4.2.13.5:*:*:*:*:*:*:*

IBM Corporation

>>java>>1.4.2.13.6

cpe:2.3:a:ibm:java:1.4.2.13.6:*:*:*:*:*:*:*

IBM Corporation

>>java>>1.4.2.13.7

cpe:2.3:a:ibm:java:1.4.2.13.7:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>Versions up to 5.0.12.4(inclusive)

cpe:2.3:a:ibm:runtimes_for_java_technology:*:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>Versions up to 6.0.9.0(inclusive)

cpe:2.3:a:ibm:runtimes_for_java_technology:*:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>5.0.0

cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>5.0.11.0

cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.11.0:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>5.0.11.1

cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.11.1:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>5.0.11.2

cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.11.2:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>5.0.12.0

cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.12.0:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>5.0.12.1

cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.12.1:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>5.0.12.2

cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.12.2:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>5.0.12.3

cpe:2.3:a:ibm:runtimes_for_java_technology:5.0.12.3:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>6.0.0

cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.0:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>6.0.1.0

cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.1.0:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>6.0.2.0

cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.2.0:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>6.0.3.0

cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.3.0:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>6.0.4.0

cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.4.0:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>6.0.5.0

cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.5.0:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>6.0.6.0

cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.6.0:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>6.0.7.0

cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.7.0:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>6.0.8.0

cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.8.0:*:*:*:*:*:*:*

IBM Corporation

>>runtimes_for_java_technology>>6.0.8.1

cpe:2.3:a:ibm:runtimes_for_java_technology:6.0.8.1:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html	cve@mitre.org	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89602	cve@mitre.org	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89620	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2011-1159.html	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2011-1265.html	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/65189	cve@mitre.org	N/A
https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89602	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89620	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2011-1159.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2011-1265.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/65189	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89602

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89620

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-1159.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-1265.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/65189

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89602

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89620

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-1159.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-1265.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/65189

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A