GHSA-xh22-fw58-56pp

Robocode Arbitrary Code Execution

Source: GitHub Advisory Database (reviewed) Moderate CVE-2007-6382

Packages

Ecosystem	Package	Affected	Fixed in
Maven	net.sf.robocode:robocode.core	< 1.5.1	1.5.1

Details

As written in the advisory (Markdown source, shown as plain text).

The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the `SwingUtilities.invokeLater` method.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2007-6382 advisory
https://github.com/robo-code/robocode/commit/2f2867d24fb28a2478983be57556f2355a774a81 web
https://github.com/robo-code/robocode/commit/8c6f5d77e7723583ba069ea611c33f22c1e9603a web
https://exchange.xforce.ibmcloud.com/vulnerabilities/39019 web
https://github.com/robo-code/robocode package
https://github.com/robo-code/robocode/blob/1abe65b65c34a8eb3d23de8f037dafae3c548fa5/versions.md?plain=1#L1880-L1887 web