CVEvulnerability
CVE-2007-3794
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-07-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.
Affected configurations
• hitachi cosminexus application server 05 00 05 00 h
• hitachi cosminexus application server 05 01 05 01 k
• hitachi cosminexus application server 05 05 05 00 o
• hitachi cosminexus application server 06 00 06 00 g
• hitachi cosminexus application server 06 02 06 02 f
• hitachi cosminexus application server 06 50 06 50 e
• hitachi cosminexus application server 06 51 06 51 g
• hitachi cosminexus client 06 00 06 00 g
• hitachi cosminexus client 06 02 06 02 f
• hitachi cosminexus client 06 50 06 50 e
• hitachi cosminexus client 06 51 06 51 g
• hitachi cosminexus developer 05 00 05 00 h
• hitachi cosminexus developer 05 01 05 01 k
• hitachi cosminexus developer 05 05 05 05 o
• hitachi cosminexus developer 06 00 06 00 g
• hitachi cosminexus developer 06 02 06 02 f
• hitachi cosminexus developer 06 50 06 50 e
• hitachi cosminexus developer 06 51 06 51 g
• hitachi cosminexus server 04 00 04 00 a
• hitachi cosminexus server 04 01 04 01 a
• hitachi cosminexus studio 04 00 04 00 a
• hitachi cosminexus studio 04 01 04 01 a
• hitachi cosminexus studio 05 05 05 05 o
• hitachi ucosminexus application server 06 70 06 70 a
• hitachi ucosminexus application server 06 70 06 70 b
• hitachi ucosminexus application server 06 71 06 71 b
• hitachi ucosminexus application server 07 00 07 20
• hitachi ucosminexus client 06 70 06 70 b
• hitachi ucosminexus client 06 71 06 71 b
• hitachi ucosminexus client 07 00 07 20
• hitachi ucosminexus developer 06 70 06 70 b
• hitachi ucosminexus developer 06 71 06 71 b
• hitachi ucosminexus operator 07 00 07 20
• hitachi ucosminexus service architect 07 00 07 20
• hitachi ucosminexus service platform 07 00 07 20
• hitachi cosminexus application server 05 05 05 05 h
• hitachi cosminexus application server 06 00 06 00 b
• hitachi cosminexus application server 06 00 06 00 d
• hitachi cosminexus application server 06 50 06 50 b
• hitachi cosminexus application server 06 50 06 50 c
• hitachi cosminexus application server 06 51 06 51 b
• hitachi cosminexus application server 06 51 06 51 c
• hitachi ucosminexus application server 07 00 07 10
• hitachi ucosminexus service platform 07 00 07 10
• hitachi cosminexus application server 05 02 05 02 e
• hitachi cosminexus application server 06 00 06 00 e
• hitachi cosminexus application server 06 50 06 50 d
• hitachi ucosminexus application server 06 70 06 70 h
• hitachi ucosminexus application server 06 70 06 72
• hitachi ucosminexus application server 07 10
• hitachi cosminexus application server 05 00 05 00 r
• hitachi cosminexus application server 05 05 05 05 l
• hitachi cosminexus application server 06 50 06 50 f
• hitachi ucosminexus application server 06 70 06 70 d
• hitachi ucosminexus service platform 07 10
• hitachi cosminexus application server 06 00 06 00 a
• hitachi ucosminexus application server 06 70 06 70 c
• hitachi ucosminexus application server 07 00
References
- http://osvdb.org/37851 osvdb.org
- http://secunia.com/advisories/26025 Vendor Advisory
- http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html www.hitachi-support.com
- http://www.securityfocus.com/bid/24905 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2534 www.vupen.com
- http://osvdb.org/37851 osvdb.org
- http://secunia.com/advisories/26025 Vendor Advisory
- http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html www.hitachi-support.com
- http://www.securityfocus.com/bid/24905 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2534 www.vupen.com