Robocode Arbitrary Code Execution

MÉDIO 6.8CVE-2007-6382 · GHSA-xh22-fw58-56pp · Published 15/12/2007 · updated 16/06/2026

Em resumo

CVE-2007-6382 é uma vulnerabilidade MÉDIO (CVSS 6.8) que afeta net.sf.robocode:robocode.core, robocode (robocode).
Chance de exploração nos próximos 30 dias (EPSS): 1.9%, maior que 79.4% das vulnerabilidades.
Correção: atualize para 1.5.1 ou posterior.

Package	Affected versions	Patched versions
net.sf.robocode:robocode.core Maven	`< 1.5.1`	`1.5.1`
robocode robocode	`≤ 1.4.9`	No fix yet

Description

The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method.

NVD description

The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method.

References

nvd.nist.gov/vuln/detail/CVE-2007-6382 · ADVISORY
robo-code/robocode commit 2f2867d · WEB
robo-code/robocode commit 8c6f5d7 · WEB
exchange.xforce.ibmcloud.com/vulnerabilities/39019 · WEB
robo-code/robocode · PACKAGE
robo-code/robocode · WEB
osvdb.org/40473
secunia.com/advisories/28080 · Patch
sourceforge.net/project/shownotes.php
securityfocus.com/bid/26854

Mais vulnerabilidades de net.sf.robocode:robocode.core

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free