What is GHSA-xh22-fw58-56pp?

GHSA-xh22-fw58-56pp is a security advisory published by GitHub Security Advisories with Medium severity. Robocode Arbitrary Code Execution

Which CVE IDs does GHSA-xh22-fw58-56pp cover?

GHSA-xh22-fw58-56pp covers the following CVE IDs: CVE-2007-6382. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-xh22-fw58-56pp?

GHSA-xh22-fw58-56pp affects 1 product, including: maven/net.sf.robocode:robocode.core:\u003c 1.5.1.

GHSA-xh22-fw58-56ppMedium

Robocode Arbitrary Code Execution

Vendor

GitHub Security Advisories

Published

May 1, 2022

Last Modified

September 21, 2023

🔗 CVE IDs covered (1)

CVE-2007-6382 →

📋 Description

The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method.

🎯 Affected products1

maven/net.sf.robocode:robocode.core:< 1.5.1

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2007-6382
https://exchange.xforce.ibmcloud.com/vulnerabilities/39019
https://github.com/robo-code/robocode/commit/2f2867d24fb28a2478983be57556f2355a774a81
https://github.com/robo-code/robocode/commit/8c6f5d77e7723583ba069ea611c33f22c1e9603a
https://github.com/robo-code/robocode/blob/1abe65b65c34a8eb3d23de8f037dafae3c548fa5/versions.md?plain=1#L1880-L1887
https://github.com/advisories/GHSA-xh22-fw58-56pp