CVE-2007-3794
Critical
Description
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.
SeverityCritical
CVSS10.0
Exploit probability—
ProductHitachi Cosminexus Application Server
PublishedJul 15, 2007
First seenJul 15, 2007
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hitachi cosminexus_application_server | 05_00_05_00_h, 05_01_05_01_k, 05_05_05_00_o, 06_00_06_00_g, 06_02_06_02_f, 06_50_06_50_e, 06_51_06_51_g, 05_05_05_05_h, 06_00_06_00_b, 06_00_06_00_d, 06_50_06_50_b, 06_50_06_50_c, 06_51_06_51_b, 06_51_06_51_c, 05_02_05_02_e, 06_00_06_00_e, 06_50_06_50_d, 05_00_05_00_r, 05_05_05_05_l, 06_50_06_50_f, 06_00_06_00_a | — |
| hitachi cosminexus_client | 06_00_06_00_g, 06_02_06_02_f, 06_50_06_50_e, 06_51_06_51_g | — |
| hitachi cosminexus_developer | 05_00_05_00_h, 05_01_05_01_k, 05_05_05_05_o, 06_00_06_00_g, 06_02_06_02_f, 06_50_06_50_e, 06_51_06_51_g | — |
| hitachi cosminexus_server | 04_00_04_00_a, 04_01_04_01_a | — |
| hitachi cosminexus_studio | 04_00_04_00_a, 04_01_04_01_a, 05_05_05_05_o | — |
| hitachi ucosminexus_application_server | 06_70_06_70_a, 06_70_06_70_b, 06_71_06_71_b, 07_00_07_20, 07_00_07_10, 06_70_06_70_h, 06_70_06_72, 07_10, 06_70_06_70_d, 06_70_06_70_c, 07_00 | — |
| hitachi ucosminexus_client | 06_70_06_70_b, 06_71_06_71_b, 07_00_07_20 | — |
| hitachi ucosminexus_developer | 06_70_06_70_b, 06_71_06_71_b | — |
| hitachi ucosminexus_operator | 07_00_07_20 | — |
| hitachi ucosminexus_service_architect | 07_00_07_20 | — |
| hitachi ucosminexus_service_platform | 07_00_07_20, 07_00_07_10, 07_10 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.