Lucene search
HistoryJul 15, 2007 - 11:30 p.m.
CVE-2007-3794
cve-2007-3794
buffer overflow
hitachi
cosminexus
xml
developer's kit
java
gif images
gif image processing apis
security vulnerability
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.1%
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer’s Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.
Affected configurations
Node
microsoftwindows
hitachicosminexus_application_serverMatch05_00_05_00_h
ORhitachicosminexus_application_serverMatch05_01_05_01_k
ORhitachicosminexus_application_serverMatch05_05_05_00_o
ORhitachicosminexus_application_serverMatch06_00_06_00_genterprise
ORhitachicosminexus_application_serverMatch06_00_06_00_gstandard
ORhitachicosminexus_application_serverMatch06_02_06_02_fenterprise
ORhitachicosminexus_application_serverMatch06_02_06_02_fstandard
ORhitachicosminexus_application_serverMatch06_50_06_50_eenterprise
ORhitachicosminexus_application_serverMatch06_50_06_50_estandard
ORhitachicosminexus_application_serverMatch06_51_06_51_genterprise
ORhitachicosminexus_application_serverMatch06_51_06_51_gstandard
ORhitachicosminexus_clientMatch06_00_06_00_g
ORhitachicosminexus_clientMatch06_02_06_02_f
ORhitachicosminexus_clientMatch06_50_06_50_e
ORhitachicosminexus_clientMatch06_51_06_51_g
ORhitachicosminexus_developerMatch05_00_05_00_h
ORhitachicosminexus_developerMatch05_01_05_01_k
ORhitachicosminexus_developerMatch05_05_05_05_o
ORhitachicosminexus_developerMatch06_00_06_00_glight
ORhitachicosminexus_developerMatch06_00_06_00_gprofessional
ORhitachicosminexus_developerMatch06_00_06_00_gstandard
ORhitachicosminexus_developerMatch06_02_06_02_flight
ORhitachicosminexus_developerMatch06_02_06_02_fprofessional
ORhitachicosminexus_developerMatch06_02_06_02_fstandard
ORhitachicosminexus_developerMatch06_50_06_50_elight
ORhitachicosminexus_developerMatch06_50_06_50_eprofessional
ORhitachicosminexus_developerMatch06_50_06_50_estandard
ORhitachicosminexus_developerMatch06_51_06_51_glight
ORhitachicosminexus_developerMatch06_51_06_51_gprofessional
ORhitachicosminexus_developerMatch06_51_06_51_gstandard
ORhitachicosminexus_serverMatch04_00_04_00_astandard
ORhitachicosminexus_serverMatch04_00_04_00_aweb
ORhitachicosminexus_serverMatch04_01_04_01_astandard
ORhitachicosminexus_serverMatch04_01_04_01_aweb
ORhitachicosminexus_studioMatch04_00_04_00_astandard
ORhitachicosminexus_studioMatch04_00_04_00_aweb
ORhitachicosminexus_studioMatch04_01_04_01_astandard
ORhitachicosminexus_studioMatch04_01_04_01_aweb
ORhitachicosminexus_studioMatch05_05_05_05_o
Node
microsoftwindows
hitachiucosminexus_application_serverMatch06_70_06_70_aenterprise
ORhitachiucosminexus_application_serverMatch06_70_06_70_astandard
ORhitachiucosminexus_application_serverMatch06_70_06_70_benterprise
ORhitachiucosminexus_application_serverMatch06_70_06_70_bstandard
ORhitachiucosminexus_application_serverMatch06_71_06_71_benterprise
ORhitachiucosminexus_application_serverMatch06_71_06_71_bstandard
ORhitachiucosminexus_application_serverMatch07_00_07_20enterprise
ORhitachiucosminexus_application_serverMatch07_00_07_20standard
ORhitachiucosminexus_clientMatch06_70_06_70_b
ORhitachiucosminexus_clientMatch06_71_06_71_b
ORhitachiucosminexus_clientMatch07_00_07_20
ORhitachiucosminexus_developerMatch06_70_06_70_blight
ORhitachiucosminexus_developerMatch06_70_06_70_bprofessional
ORhitachiucosminexus_developerMatch06_70_06_70_bstandard
ORhitachiucosminexus_developerMatch06_71_06_71_blight
ORhitachiucosminexus_developerMatch06_71_06_71_bprofessional
ORhitachiucosminexus_developerMatch06_71_06_71_bstandard
ORhitachiucosminexus_operatorMatch07_00_07_20
ORhitachiucosminexus_service_architectMatch07_00_07_20
ORhitachiucosminexus_service_platformMatch07_00_07_20
Node
linuxlinux_kernel
hitachicosminexus_application_serverMatch05_05_05_05_h
ORhitachicosminexus_application_serverMatch06_00_06_00_benterprise
ORhitachicosminexus_application_serverMatch06_00_06_00_bstandard
ORhitachicosminexus_application_serverMatch06_00_06_00_d
ORhitachicosminexus_application_serverMatch06_02_06_02_f
ORhitachicosminexus_application_serverMatch06_02_06_02_fenterprise
ORhitachicosminexus_application_serverMatch06_02_06_02_fstandard
ORhitachicosminexus_application_serverMatch06_50_06_50_benterprise
ORhitachicosminexus_application_serverMatch06_50_06_50_bstandard
ORhitachicosminexus_application_serverMatch06_50_06_50_c
ORhitachicosminexus_application_serverMatch06_51_06_51_b
ORhitachicosminexus_application_serverMatch06_51_06_51_benterprise
ORhitachicosminexus_application_serverMatch06_51_06_51_bstandard
ORhitachicosminexus_application_serverMatch06_51_06_51_c
ORhitachiucosminexus_application_serverMatch06_70_06_70_benterprise
ORhitachiucosminexus_application_serverMatch06_70_06_70_bstandard
ORhitachiucosminexus_application_serverMatch06_71_06_71_benterprise
ORhitachiucosminexus_application_serverMatch06_71_06_71_bstandard
ORhitachiucosminexus_application_serverMatch07_00_07_10enterprise
ORhitachiucosminexus_application_serverMatch07_00_07_10standard
ORhitachiucosminexus_service_platformMatch07_00_07_10
Node
hphp-ux
hitachicosminexus_application_serverMatch05_02_05_02_e
ORhitachicosminexus_application_serverMatch05_05_05_05_h
ORhitachicosminexus_application_serverMatch06_00_06_00_denterprise
ORhitachicosminexus_application_serverMatch06_00_06_00_dstandard
ORhitachicosminexus_application_serverMatch06_00_06_00_eenterprise
ORhitachicosminexus_application_serverMatch06_00_06_00_estandard
ORhitachicosminexus_application_serverMatch06_50_06_50_denterprise
ORhitachicosminexus_application_serverMatch06_50_06_50_dstandard
ORhitachicosminexus_application_serverMatch06_50_06_50_eenterprise
ORhitachicosminexus_application_serverMatch06_50_06_50_estandard
ORhitachiucosminexus_application_serverMatch06_70_06_70_benterprise
ORhitachiucosminexus_application_serverMatch06_70_06_70_bstandard
ORhitachiucosminexus_application_serverMatch06_70_06_70_henterprise
ORhitachiucosminexus_application_serverMatch06_70_06_70_hstandard
ORhitachiucosminexus_application_serverMatch06_70_06_72enterprise
ORhitachiucosminexus_application_serverMatch06_70_06_72standard
ORhitachiucosminexus_application_serverMatch07_00_07_10enterprise
ORhitachiucosminexus_application_serverMatch07_00_07_10standard
ORhitachiucosminexus_application_serverMatch07_10enterprise
ORhitachiucosminexus_application_serverMatch07_10standard
Node
ibmaix
hitachicosminexus_application_serverMatch05_00_05_00_r
ORhitachicosminexus_application_serverMatch05_05_05_05_l
ORhitachicosminexus_application_serverMatch06_00_06_00_genterprise
ORhitachicosminexus_application_serverMatch06_00_06_00_gstandard
ORhitachicosminexus_application_serverMatch06_50_06_50_fenterprise
ORhitachicosminexus_application_serverMatch06_50_06_50_fstandard
ORhitachiucosminexus_application_serverMatch06_70_06_70_denterprise
ORhitachiucosminexus_application_serverMatch06_70_06_70_dstandard
ORhitachiucosminexus_application_serverMatch07_00_07_10enterprise
ORhitachiucosminexus_application_serverMatch07_00_07_10standard
ORhitachiucosminexus_service_platformMatch07_10
Node
sunsolaris
hitachicosminexus_application_serverMatch06_00_06_00_aenterprise
ORhitachicosminexus_application_serverMatch06_00_06_00_astandard
ORhitachicosminexus_application_serverMatch06_50_06_50_centerprise
ORhitachicosminexus_application_serverMatch06_50_06_50_cstandard
ORhitachiucosminexus_application_serverMatch06_70_06_70_centerprise
ORhitachiucosminexus_application_serverMatch06_70_06_70_cstandard
ORhitachiucosminexus_application_serverMatch07_00enterprise
ORhitachiucosminexus_application_serverMatch07_00standard
Related
nvd
nvd
CVE-2007-3794
2007-07-15 23:30:00
CVE-2009-4776
2010-04-21 14:30:00
cvelist
cvelist
CVE-2007-3794
2007-07-15 23:00:00
CVE-2009-4776
2022-10-03 16:24:02
prion
prion
Buffer overflow
2007-07-15 23:30:00
Buffer overflow
2010-04-21 14:30:00
cve
cve
CVE-2009-4776
2022-10-03 16:24:02
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.1%
Related for CVE-2007-3794