CVE-2011-3387
The MITRE CVE dictionary describes this issue as:
The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311.
Find out more about CVE-2011-3387 from the MITRE CVE dictionary dictionary and NIST NVD.
CVSS v2 metrics
| Base Score | 3.5 |
|---|---|
| Base Metrics | AV:N/AC:M/Au:S/C:N/I:N/A:P |
| Access Vector | Network |
| Access Complexity | Medium |
| Authentication | Single |
| Confidentiality Impact | None |
| Integrity Impact | None |
| Availability Impact | Partial |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| RHEL 5 Server for SAP (java-1.4.2-ibm-sap) | RHSA-2011:1265 | 2011-09-06 |
| Red Hat Enterprise Linux Supplementary 5 (java-1.4.2-ibm) | RHSA-2011:1159 | 2011-08-15 |
| RHEL 4 AS for SAP (java-1.4.2-ibm-sap) | RHSA-2011:1265 | 2011-09-06 |
| Red Hat Enterprise Linux for SAP 6 (java-1.4.2-ibm-sap) | RHSA-2011:1265 | 2011-09-06 |
| Red Hat Enterprise Linux AS version 4 Extras (java-1.4.2-ibm) | RHSA-2011:1159 | 2011-08-15 |
CVE description copyright © 2017, The MITRE Corporation