Unscored severity · published Jul 15, 2007
CVE-2007-3794
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Cosminexus Application Server · Hitachi
05_00_05_00_h; 05_01_05_01_k; 05_05_05_00_o; 06_00_06_00_g; 06_00_06_00_g; 06_02_06_02_f; +34 more · source: NVD
CC
Cosminexus Client · Hitachi
06_00_06_00_g; 06_02_06_02_f; 06_50_06_50_e; 06_51_06_51_g · source: NVD
CD
Cosminexus Developer · Hitachi
05_00_05_00_h; 05_01_05_01_k; 05_05_05_05_o; 06_00_06_00_g; 06_00_06_00_g; 06_00_06_00_g; +9 more · source: NVD
CS
Cosminexus Server · Hitachi
04_00_04_00_a; 04_00_04_00_a; 04_01_04_01_a; 04_01_04_01_a · source: NVD
CS
Cosminexus Studio · Hitachi
04_00_04_00_a; 04_00_04_00_a; 04_01_04_01_a; 04_01_04_01_a; 05_05_05_05_o · source: NVD
UA
Ucosminexus Application Server · Hitachi
06_70_06_70_a; 06_70_06_70_a; 06_70_06_70_b; 06_70_06_70_b; 06_71_06_71_b; 06_71_06_71_b; +26 more · source: NVD
UC
Ucosminexus Client · Hitachi
06_70_06_70_b; 06_71_06_71_b; 07_00_07_20 · source: NVD
UD
Ucosminexus Developer · Hitachi
06_70_06_70_b; 06_70_06_70_b; 06_70_06_70_b; 06_71_06_71_b; 06_71_06_71_b; 06_71_06_71_b · source: NVD
UO
Ucosminexus Operator · Hitachi
07_00_07_20 · source: NVD
US
Ucosminexus Service Architect · Hitachi
07_00_07_20 · source: NVD
US
Ucosminexus Service Platform · Hitachi
07_00_07_20; 07_00_07_10; 07_10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3794
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3794
osvdb.org
http://osvdb.org/37851
Vendor Advisory
http://secunia.com/advisories/26025
www.hitachi-support.com
http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html
www.securityfocus.com
http://www.securityfocus.com/bid/24905
www.vupen.com
http://www.vupen.com/english/advisories/2007/2534
More from Cosminexus Application Server
–
CVE-2009-4776
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow,…
–
CVE-2007-4124
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the…
–
CVE-2007-3626
Unspecified vulnerability in the ADM daemon in Hitachi TPBroker before 20070706 allows remote attackers to cause a denial of service (daemon crash) via a certain request
–
CVE-2007-0514
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary…
–
CVE-2005-3164
The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a…