Unscored severity · published Sep 8, 2007
CVE-2007-4758
Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or…
–
CVSS
5.9%
EPSS
No
On KEV
Description
Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.9% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UA
Ucosminexus Application Server Enterprise · Hitachi
07_00; 07_00; 07_00; 07_00; 07_00; 07_00_01; +15 more · source: NVD
UA
Ucosminexus Application Server Standard · Hitachi
07_00; 07_00; 07_00; 07_00; 07_00; 07_00_01; +16 more · source: NVD
US
Ucosminexus Service Platform · Hitachi
07_00; 07_00; 07_00_01; 07_00_01; 07_00_02; 07_00_03; +7 more · source: NVD
Affected product
UA
Ucosminexus Application Server Enterprise
Hitachi
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4758
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4758
osvdb.org
http://osvdb.org/37857
Vendor Advisory
http://secunia.com/advisories/26538
www.hitachi-support.com
http://www.hitachi-support.com/security_e/vuls_e/HS07-028_e/index-e.html
www.vupen.com
http://www.vupen.com/english/advisories/2007/3034
More from Ucosminexus Application Server Enterprise
–
CVE-2007-5810
Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which might allow remote attackers to spoof…
–
CVE-2007-5809
Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote attackers to inject arbitrary web script…
–
CVE-2007-5281
The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus 7.5 products before 07-50-01, when using JSSE for SSL/TLS…
–
CVE-2007-4759
Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of…
–
CVE-2007-4760
The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting (XSS) vulnerabilities, which allows…