Lucene search

K
nvd[email protected]NVD:CVE-2007-3794
HistoryJul 15, 2007 - 11:30 p.m.

CVE-2007-3794

2007-07-1523:30:00
web.nvd.nist.gov
1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.1%

Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer’s Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.

Affected configurations

NVD
Node
microsoftwindows
AND
hitachicosminexus_application_serverMatch05_00_05_00_h
OR
hitachicosminexus_application_serverMatch05_01_05_01_k
OR
hitachicosminexus_application_serverMatch05_05_05_00_o
OR
hitachicosminexus_application_serverMatch06_00_06_00_genterprise
OR
hitachicosminexus_application_serverMatch06_00_06_00_gstandard
OR
hitachicosminexus_application_serverMatch06_02_06_02_fenterprise
OR
hitachicosminexus_application_serverMatch06_02_06_02_fstandard
OR
hitachicosminexus_application_serverMatch06_50_06_50_eenterprise
OR
hitachicosminexus_application_serverMatch06_50_06_50_estandard
OR
hitachicosminexus_application_serverMatch06_51_06_51_genterprise
OR
hitachicosminexus_application_serverMatch06_51_06_51_gstandard
OR
hitachicosminexus_clientMatch06_00_06_00_g
OR
hitachicosminexus_clientMatch06_02_06_02_f
OR
hitachicosminexus_clientMatch06_50_06_50_e
OR
hitachicosminexus_clientMatch06_51_06_51_g
OR
hitachicosminexus_developerMatch05_00_05_00_h
OR
hitachicosminexus_developerMatch05_01_05_01_k
OR
hitachicosminexus_developerMatch05_05_05_05_o
OR
hitachicosminexus_developerMatch06_00_06_00_glight
OR
hitachicosminexus_developerMatch06_00_06_00_gprofessional
OR
hitachicosminexus_developerMatch06_00_06_00_gstandard
OR
hitachicosminexus_developerMatch06_02_06_02_flight
OR
hitachicosminexus_developerMatch06_02_06_02_fprofessional
OR
hitachicosminexus_developerMatch06_02_06_02_fstandard
OR
hitachicosminexus_developerMatch06_50_06_50_elight
OR
hitachicosminexus_developerMatch06_50_06_50_eprofessional
OR
hitachicosminexus_developerMatch06_50_06_50_estandard
OR
hitachicosminexus_developerMatch06_51_06_51_glight
OR
hitachicosminexus_developerMatch06_51_06_51_gprofessional
OR
hitachicosminexus_developerMatch06_51_06_51_gstandard
OR
hitachicosminexus_serverMatch04_00_04_00_astandard
OR
hitachicosminexus_serverMatch04_00_04_00_aweb
OR
hitachicosminexus_serverMatch04_01_04_01_astandard
OR
hitachicosminexus_serverMatch04_01_04_01_aweb
OR
hitachicosminexus_studioMatch04_00_04_00_astandard
OR
hitachicosminexus_studioMatch04_00_04_00_aweb
OR
hitachicosminexus_studioMatch04_01_04_01_astandard
OR
hitachicosminexus_studioMatch04_01_04_01_aweb
OR
hitachicosminexus_studioMatch05_05_05_05_o
Node
microsoftwindows
AND
hitachiucosminexus_application_serverMatch06_70_06_70_aenterprise
OR
hitachiucosminexus_application_serverMatch06_70_06_70_astandard
OR
hitachiucosminexus_application_serverMatch06_70_06_70_benterprise
OR
hitachiucosminexus_application_serverMatch06_70_06_70_bstandard
OR
hitachiucosminexus_application_serverMatch06_71_06_71_benterprise
OR
hitachiucosminexus_application_serverMatch06_71_06_71_bstandard
OR
hitachiucosminexus_application_serverMatch07_00_07_20enterprise
OR
hitachiucosminexus_application_serverMatch07_00_07_20standard
OR
hitachiucosminexus_clientMatch06_70_06_70_b
OR
hitachiucosminexus_clientMatch06_71_06_71_b
OR
hitachiucosminexus_clientMatch07_00_07_20
OR
hitachiucosminexus_developerMatch06_70_06_70_blight
OR
hitachiucosminexus_developerMatch06_70_06_70_bprofessional
OR
hitachiucosminexus_developerMatch06_70_06_70_bstandard
OR
hitachiucosminexus_developerMatch06_71_06_71_blight
OR
hitachiucosminexus_developerMatch06_71_06_71_bprofessional
OR
hitachiucosminexus_developerMatch06_71_06_71_bstandard
OR
hitachiucosminexus_operatorMatch07_00_07_20
OR
hitachiucosminexus_service_architectMatch07_00_07_20
OR
hitachiucosminexus_service_platformMatch07_00_07_20
Node
linuxlinux_kernel
AND
hitachicosminexus_application_serverMatch05_05_05_05_h
OR
hitachicosminexus_application_serverMatch06_00_06_00_benterprise
OR
hitachicosminexus_application_serverMatch06_00_06_00_bstandard
OR
hitachicosminexus_application_serverMatch06_00_06_00_d
OR
hitachicosminexus_application_serverMatch06_02_06_02_f
OR
hitachicosminexus_application_serverMatch06_02_06_02_fenterprise
OR
hitachicosminexus_application_serverMatch06_02_06_02_fstandard
OR
hitachicosminexus_application_serverMatch06_50_06_50_benterprise
OR
hitachicosminexus_application_serverMatch06_50_06_50_bstandard
OR
hitachicosminexus_application_serverMatch06_50_06_50_c
OR
hitachicosminexus_application_serverMatch06_51_06_51_b
OR
hitachicosminexus_application_serverMatch06_51_06_51_benterprise
OR
hitachicosminexus_application_serverMatch06_51_06_51_bstandard
OR
hitachicosminexus_application_serverMatch06_51_06_51_c
OR
hitachiucosminexus_application_serverMatch06_70_06_70_benterprise
OR
hitachiucosminexus_application_serverMatch06_70_06_70_bstandard
OR
hitachiucosminexus_application_serverMatch06_71_06_71_benterprise
OR
hitachiucosminexus_application_serverMatch06_71_06_71_bstandard
OR
hitachiucosminexus_application_serverMatch07_00_07_10enterprise
OR
hitachiucosminexus_application_serverMatch07_00_07_10standard
OR
hitachiucosminexus_service_platformMatch07_00_07_10
Node
hphp-ux
AND
hitachicosminexus_application_serverMatch05_02_05_02_e
OR
hitachicosminexus_application_serverMatch05_05_05_05_h
OR
hitachicosminexus_application_serverMatch06_00_06_00_denterprise
OR
hitachicosminexus_application_serverMatch06_00_06_00_dstandard
OR
hitachicosminexus_application_serverMatch06_00_06_00_eenterprise
OR
hitachicosminexus_application_serverMatch06_00_06_00_estandard
OR
hitachicosminexus_application_serverMatch06_50_06_50_denterprise
OR
hitachicosminexus_application_serverMatch06_50_06_50_dstandard
OR
hitachicosminexus_application_serverMatch06_50_06_50_eenterprise
OR
hitachicosminexus_application_serverMatch06_50_06_50_estandard
OR
hitachiucosminexus_application_serverMatch06_70_06_70_benterprise
OR
hitachiucosminexus_application_serverMatch06_70_06_70_bstandard
OR
hitachiucosminexus_application_serverMatch06_70_06_70_henterprise
OR
hitachiucosminexus_application_serverMatch06_70_06_70_hstandard
OR
hitachiucosminexus_application_serverMatch06_70_06_72enterprise
OR
hitachiucosminexus_application_serverMatch06_70_06_72standard
OR
hitachiucosminexus_application_serverMatch07_00_07_10enterprise
OR
hitachiucosminexus_application_serverMatch07_00_07_10standard
OR
hitachiucosminexus_application_serverMatch07_10enterprise
OR
hitachiucosminexus_application_serverMatch07_10standard
Node
ibmaix
AND
hitachicosminexus_application_serverMatch05_00_05_00_r
OR
hitachicosminexus_application_serverMatch05_05_05_05_l
OR
hitachicosminexus_application_serverMatch06_00_06_00_genterprise
OR
hitachicosminexus_application_serverMatch06_00_06_00_gstandard
OR
hitachicosminexus_application_serverMatch06_50_06_50_fenterprise
OR
hitachicosminexus_application_serverMatch06_50_06_50_fstandard
OR
hitachiucosminexus_application_serverMatch06_70_06_70_denterprise
OR
hitachiucosminexus_application_serverMatch06_70_06_70_dstandard
OR
hitachiucosminexus_application_serverMatch07_00_07_10enterprise
OR
hitachiucosminexus_application_serverMatch07_00_07_10standard
OR
hitachiucosminexus_service_platformMatch07_10
Node
sunsolaris
AND
hitachicosminexus_application_serverMatch06_00_06_00_aenterprise
OR
hitachicosminexus_application_serverMatch06_00_06_00_astandard
OR
hitachicosminexus_application_serverMatch06_50_06_50_centerprise
OR
hitachicosminexus_application_serverMatch06_50_06_50_cstandard
OR
hitachiucosminexus_application_serverMatch06_70_06_70_centerprise
OR
hitachiucosminexus_application_serverMatch06_70_06_70_cstandard
OR
hitachiucosminexus_application_serverMatch07_00enterprise
OR
hitachiucosminexus_application_serverMatch07_00standard

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.1%

Related for NVD:CVE-2007-3794