CVE-2007-3794
highpriority · track · 41EPSS 0.022 · 82 %ileEUUSEPSS · scored 2026-10-28
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (59)
Products and version ranges known to be affected.
- hitachi cosminexus application server= 05_00_05_00_hnvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 05_00_05_00_rnvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 05_01_05_01_knvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 05_02_05_02_envdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 05_05_05_00_onvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 05_05_05_05_hnvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 05_05_05_05_lnvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 06_00_06_00_anvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 06_00_06_00_bnvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 06_00_06_00_dnvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 06_00_06_00_envdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 06_00_06_00_gnvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 06_02_06_02_fnvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 06_50_06_50_bnvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 06_50_06_50_cnvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 06_50_06_50_dnvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 06_50_06_50_envdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 06_50_06_50_fnvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
- hitachi cosminexus application server= 06_51_06_51_bnvdUScpe:2.3:a:hitachi:cosminexus_application_server:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (10)
External citations — patches, advisories, analysis.
- http://osvdb.org/37851enisa_euvd
- http://secunia.com/advisories/26025enisa_euvd
- http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.htmlenisa_euvd
- http://www.securityfocus.com/bid/24905enisa_euvd
- http://www.vupen.com/english/advisories/2007/2534enisa_euvd
- http://osvdb.org/37851nvd
- http://secunia.com/advisories/26025Vendor Advisorynvd
- http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.htmlnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan