CVE-2007-5281

The Java Secure Socket Extension JSSE in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS support, allows remote attackers to cause a denial of service via certain SSL/TLS handshake requests. NOTE: this may be...

PT-2007-6354 · Oracle +1 · Jdk +3

Name of the Vulnerable Software and Affected Versions: sun jdk affected versions not specified sun jre affected versions not specified sun sdk affected versions not specified Description: Potential security vulnerabilities have been identified in Java Runtime Environment JRE and Java Developer Ki...

CVE-2007-4759

Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service via unspecified vectors...

CVE-2007-4760

The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as...

CVE-2007-4758

Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...

Buffer overflow

Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...

Cross site scripting

The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as...

CVE-2007-4759

Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service via unspecified vectors...

CVE-2007-4760

CVE-2007-4760 relates to the Javadoc tool in Cosminexus Developer's Kit for Java (Cosminexus 7/7.5), which can produce HTML with cross-site scripting (XSS). Connected documents reference the broader XSS issue in Javadoc (CVE-2007-3503) and related Java vulnerabilities; exploitation details are no...

CVE-2007-4759

Technical details about CVE-2007-4759 are not publicly available in the provided connected documents; the materials reiterate a general DoS via image-processing APIs in Cosminexus 4–7. Monitor for updates.

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 : java (jre, jdk) (SSA:2007-243-01)

Sun has released security advisories pertaining to both the Java Runtime Environment and the Standard Edition Development Kit. One such advisory may be found here: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102995-1 Updated versions of both the jre and jdk packages are provided whic...

[slackware-security] java (jre, jdk)

Sun has released security advisories pertaining to both the Java Runtime Environment and the Standard Edition Development Kit. One such advisory may be found here: http://sunsolve.sun.com/search/document.do?assetkey=1-26-102995-1 Updated versions of both the jre and jdk packages are provided whic...

Content Construction Kit - Cross site scripting

The Content Construction Kit CCK allows site admins to create and customize node fields. The Nodereference module included in the CCK bundle defines fields referencing other nodes. Two cross-site scripting XSS vulnerabilities were discovered : when a nodereference field is displayed using the...

CVE-2007-4195

Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit TSK before 2.09 allows user-assisted remote attackers to cause a denial of service application crash and prevent examination of certain ext2fs files via a malformed ext2fs image...

DEBIAN-CVE-2007-4197

icat in Brian Carrier The Sleuth Kit TSK before 2.09 omits NULL pointer checks in certain code paths, which allows user-assisted remote attackers to cause a denial of service NULL dereference and application crash and prevent examination of certain NTFS files via a malformed NTFS image...

CVE-2007-4197

icat in Brian Carrier The Sleuth Kit TSK before 2.09 omits NULL pointer checks in certain code paths, which allows user-assisted remote attackers to cause a denial of service NULL dereference and application crash and prevent examination of certain NTFS files via a malformed NTFS image...

DEBIAN-CVE-2007-4195

Use-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit TSK before 2.09 allows user-assisted remote attackers to cause a denial of service application crash and prevent examination of certain ext2fs files via a malformed ext2fs image...

DEBIAN-CVE-2007-4196

icat in Brian Carrier The Sleuth Kit TSK before 2.09 misinterprets a certain memory location as the holder of a loop iteration count, which allows user-assisted remote attackers to cause a denial of service long loop and prevent examination of certain NTFS files via a malformed NTFS image...

CVE-2007-4196

icat in Brian Carrier The Sleuth Kit TSK before 2.09 misinterprets a certain memory location as the holder of a loop iteration count, which allows user-assisted remote attackers to cause a denial of service long loop and prevent examination of certain NTFS files via a malformed NTFS image...

CVE-2007-4199

Brian Carrier The Sleuth Kit TSK before 2.09 allows user-assisted remote attackers to cause a denial of service application crash and prevent examination of certain NTFS files via a malformed NTFS image that triggers 1 dereference of a certain integer value by ntfsdent.c in fls, or 2 dereference ...