The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
| Link | Tags |
|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00010.html | vendor advisory |
| http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89602 | vendor advisory |
| http://www.redhat.com/support/errata/RHSA-2011-1159.html | vendor advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/65189 | vdb entry |
| http://www-01.ibm.com/support/docview.wss?uid=swg1IZ89620 | vendor advisory |
| https://www-304.ibm.com/support/docview.wss?uid=isg1PM42551 | vendor advisory |
| http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00004.html | vendor advisory |
| http://www.redhat.com/support/errata/RHSA-2011-1265.html | vendor advisory |