Description
The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | net.sf.robocode:robocode.core | < 1.5.1 | 1.5.1 | GHSA-xh22-fw58-56pp |
References
- 28080 third-party-advisory
- 26854 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=561214
- robocode-swingutilities-code-execution(39019) vdb-entry
- 40473 vdb-entry