Robocode Arbitrary Code Execution

MEDIO 6.8CVE-2007-6382 · GHSA-xh22-fw58-56pp · Published 15/12/2007 · updated 16/06/2026

En resumen

CVE-2007-6382 es una vulnerabilidad MEDIO (CVSS 6.8) que afecta a net.sf.robocode:robocode.core, robocode (robocode).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.9%, mayor que el 79.4% de las vulnerabilidades.
Solución: actualizar a 1.5.1 o posterior.

Package	Affected versions	Patched versions
net.sf.robocode:robocode.core Maven	`< 1.5.1`	`1.5.1`
robocode robocode	`≤ 1.4.9`	No fix yet

Description

The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method.

NVD description

The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method.

References

nvd.nist.gov/vuln/detail/CVE-2007-6382 · ADVISORY
robo-code/robocode commit 2f2867d · WEB
robo-code/robocode commit 8c6f5d7 · WEB
exchange.xforce.ibmcloud.com/vulnerabilities/39019 · WEB
robo-code/robocode · PACKAGE
robo-code/robocode · WEB
osvdb.org/40473
secunia.com/advisories/28080 · Patch
sourceforge.net/project/shownotes.php
securityfocus.com/bid/26854

Más vulnerabilidades de net.sf.robocode:robocode.core

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free