CVE-2007-3794

Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2007-07-15

Last modified

2024-08-07

Affected products

• Cosminexus Application Server (Hitachi)
• Cosminexus Client (Hitachi)
• Cosminexus Developer (Hitachi)
• Cosminexus Server (Hitachi)
• Cosminexus Studio (Hitachi)
• Ucosminexus Application Server (Hitachi)
• Ucosminexus Client (Hitachi)
• Ucosminexus Developer (Hitachi)
• Ucosminexus Operator (Hitachi)
• Ucosminexus Service Architect (Hitachi)
• Ucosminexus Service Platform (Hitachi)

References

• http://osvdb.org/37851
• http://secunia.com/advisories/26025
• http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html
• http://www.securityfocus.com/bid/24905
• http://www.vupen.com/english/advisories/2007/2534