The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method.
CVSS Vector
AV:N/AC:M/Au:N/C:P/I:P/A:PRobocode
APPRobocode≤ 1.4.9
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2025-14306CRITICAL10.0PL ✓same product
Path Traversal w Robocode CacheCleaner — usuwanie dowolnych plików
CVE-2025-14307CRITICAL9.3PL ✓same product
Robocode: podatność race condition przy tworzeniu plików tymczasowych (RCE)
CVE-2025-14308CRITICAL10.0PL ✓same product
Integer overflow w klasie Buffer Robocode umożliwiający RCE
CVE-2019-10648CRITICAL9.8PL ✓same product
Robocode: nieautoryzowana interakcja z zewnętrznym DNS (SSRF/DNS lookup)
CVE-2008-2078HIGH7.5same product
Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via...