CVEvulnerability
CVE-2009-4776
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-04-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.
Affected configurations
• hitachi ucosminexus\/opentp1 web web front-endset 02-70
• hitachi ucosminexus\/opentp1 web web front-endset 02-70-\/a
• hitachi ucosminexus application server 06-70
• hitachi ucosminexus application server 06-70-\/a
• hitachi ucosminexus application server 06-70-\/e
• hitachi ucosminexus application server 06-70-\/f
• hitachi ucosminexus application server 06-70-\/g
• hitachi ucosminexus application server 06-70-\/l
• hitachi ucosminexus application server 06-70-\/n
• hitachi ucosminexus application server 06-70f
• hitachi ucosminexus application server 06-71
• hitachi ucosminexus application server 06-71-\/f
• hitachi ucosminexus application server 06-71-\/g
• hitachi ucosminexus application server 06-72
• hitachi ucosminexus application server 06-72-\/d
• hitachi ucosminexus application server 6.7
• hitachi ucosminexus application server 7
• hitachi ucosminexus application server 07-00
• hitachi ucosminexus application server 07-10
• hitachi ucosminexus application server 07-60
• hitachi ucosminexus application server 8
• hitachi ucosminexus application server 08-00
• hitachi ucosminexus client 06-70
• hitachi ucosminexus client 06-70-\/f
• hitachi ucosminexus client 06-71
• hitachi ucosminexus client 06-71-\/f
• hitachi ucosminexus client 07-00
• hitachi ucosminexus client 07-60
• hitachi ucosminexus client 8
• hitachi ucosminexus client 08-00
• hitachi ucosminexus collaboration 06-20
• hitachi ucosminexus collaboration 06-20-\/d
• hitachi ucosminexus collaboration 06-30
• hitachi ucosminexus collaboration 06-30-\/f
• hitachi ucosminexus collaboration 06-35
• hitachi ucosminexus collaboration 06-35-\/f
• hitachi ucosminexus developer 6
• hitachi ucosminexus developer 06-70
• hitachi ucosminexus developer 06-70-\/f
• hitachi ucosminexus developer 06-71
• hitachi ucosminexus developer 06-71-\/f
• hitachi ucosminexus developer 6.7
• hitachi ucosminexus developer 7
• hitachi ucosminexus developer 07-00
• hitachi ucosminexus developer 07-60
• hitachi ucosminexus developer 8
• hitachi ucosminexus developer 08-00
• hitachi ucosminexus operator 6.7
• hitachi ucosminexus operator 7
• hitachi ucosminexus operator 07-00
• hitachi ucosminexus operator 07-60
• hitachi ucosminexus operator 8
• hitachi ucosminexus service architect 6.7
• hitachi ucosminexus service architect 7
• hitachi ucosminexus service architect 07-00
• hitachi ucosminexus service architect 07-60
• hitachi ucosminexus service architect 8
• hitachi ucosminexus service architect 08-00
• hitachi ucosminexus service platform 6.7
• hitachi ucosminexus service platform 7
… and 151 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/57834 osvdb.org
- http://secunia.com/advisories/36622 Vendor Advisory
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html www.hitachi.co.jp
- http://www.securityfocus.com/bid/36309 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2574 Vendor Advisory
- http://osvdb.org/57834 osvdb.org
- http://secunia.com/advisories/36622 Vendor Advisory
- http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html www.hitachi.co.jp
- http://www.securityfocus.com/bid/36309 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/2574 Vendor Advisory