robocode vulnerabilities

Products

• robocode 3

Latest robocode CVEs

Newest publication first

1. CVE-2019-10648 Improper Input Validation in net.sf.robocode:robocode.host allows for external service interaction

   Published 2019-03-30

   Critical·CVSS 9.8

   Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone, because of a .openStream call within java.net.URL.

2. CVE-2008-2078 Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecified vectors related to the AWT Event Queue.

   Published 2008-05-05

   High·CVSS 7.5

   Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecified vectors related to the AWT Event Queue.

3. CVE-2007-6382 Robocode Arbitrary Code Execution

   Published 2007-12-15

   Medium·CVSS 6.8

   The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.