CVE-2011-0311

CVE-2011-0311 describes a denial-of-service vulnerability in IBM Java before 1.4.2 SR13 FP9 and IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10. An authenticated remote attacker can exploit a crafted attribute length field in a class file to trigger a buffer over-read, leading to a JVM segmentation fault, memory consumption, or an infinite loop. This vulnerability has a CVSS score of 3.5 (medium severity), indicating a network-based attack with medium complexity requiring authentication, resulting in partial availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.