PT-2019-11963 · Robocode · Robocode
CVE-2019-10648
·
Publicado
2019-03-30
·
Atualizado
2026-06-04
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Robocode versions prior to 1.9.3.6
Description
The issue allows remote attackers to cause external service interaction, specifically DNS queries, by leveraging a .openStream call within java.net.URL. This can be demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone.
Recommendations
For Robocode versions prior to 1.9.3.6, update to version 1.9.3.6 or later to resolve the issue.
Correção
RCE
Missing Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Robocode