CVE-2017-3207

The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an R...

CVE-2017-3207

The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an R...

CVE-2017-3207

CVE-2017-3207 affects WebORB for Java by Midnight Coders (v5.1.1.0). The AMF3 deserializers derive class instances from java.io.Externalizable instead of the recommended flash.utils.IExternalizable, enabling a remote attacker able to spoof/control an RMI server to send serialized Java objects tha...