Unscored severity · published Apr 21, 2010
CVE-2009-4776
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow,…
–
CVSS
3.1%
EPSS
No
On KEV
Description
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Cosminexus Application Server · Hitachi
5; 05-00; 05-00-/i; 05-00-/s; 05-01; 05-01-/l; +34 more · source: NVD
CC
Cosminexus Client · Hitachi
06-00; 06-00-/i; 06-02; 06-02-/g; 06-50; 06-50-/f; +2 more · source: NVD
CD
Cosminexus Developer · Hitachi
5; 05-00; 05-00-/i; 05-01; 05-01-/l; 05-05; +28 more · source: NVD
CS
Cosminexus Server · Hitachi
04-00; 04-00; 04-00-/a; 04-00-/a; 04-01; 04-01; +2 more · source: NVD
CS
Cosminexus Studio · Hitachi
04-00; 04-00; 04-00-/a; 04-00-/a; 04-01; 04-01; +8 more · source: NVD
CW
Cosminexus/opentp1 Web Web Front-endset · Hitachi
01-00; 01-00-/b; 01-01; 01-01-/c; 02-00; 02-00-/a; +2 more · source: NVD
DK
Developer's Kit For Java · Hitachi
All versions, or not specified · source: NVD
EF
Electronic Form Workflow Set · Hitachi
07-50; 07-50-/d; 07-60; 07-60-/i · source: NVD
EF
Electronic Form Workflow-developer Client Set · Hitachi
06-70; 06-70-/f; 07-00; 07-00-/c; 07-10; 07-10-/a; +4 more · source: NVD
EF
Electronic Form Workflow-developer Set · Hitachi
07-50; 07-50-/d; 07-60; 07-60-/i · source: NVD
EF
Electronic Form Workflow-professional Library Set · Hitachi
06-70; 06-70-/c; 06-70-/f; 07-00; 07-00-/b; 07-00-/c; +6 more · source: NVD
EF
Electronic Form Workflow-professional Set · Hitachi
07-50; 07-50-/d · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4776
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4776
osvdb.org
http://osvdb.org/57834
Vendor Advisory
http://secunia.com/advisories/36622
www.hitachi.co.jp
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html
www.securityfocus.com
http://www.securityfocus.com/bid/36309
Vendor Advisory
http://www.vupen.com/english/advisories/2009/2574
More from Cosminexus Application Server
–
CVE-2007-4124
The session failover function in Cosminexus Component Container in Cosminexus 6, 6.7, and 7 before 20070731, as used in multiple Hitachi products, can use session data for the…
–
CVE-2007-3794
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this…
–
CVE-2007-3626
Unspecified vulnerability in the ADM daemon in Hitachi TPBroker before 20070706 allows remote attackers to cause a denial of service (daemon crash) via a certain request
–
CVE-2007-0514
Multiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus, and Cosminexus products before 20070124 allow remote attackers to inject arbitrary…
–
CVE-2005-3164
The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a…