CVE-2011-3387

CVE-2011-3387 describes a denial-of-service vulnerability in IBM Java 1.4.2 SR13 FP9, specifically within its class file parser. An authenticated remote attacker can exploit this by providing a malformed class file with a crafted attribute length field, leading to excessive memory consumption or an infinite loop. The vulnerability has a CVSS score of 4.0, indicating a low severity with network access, low attack complexity, and requiring authentication, resulting in partial availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.