PT-2007-5032 · Hitachi · Processing Kit For Xml+2

Published 2007-07-15 · Updated 2011-03-08 · CVE-2007-3794

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hitachi Cosminexus versions V4 through V7 Processing Kit for XML versions prior to 20070511 Developer's Kit for Java versions prior to 20070312

Description The issue is related to a buffer overflow that occurs when processing certain GIF images using GIF image processing APIs by a Java application. This can allow attackers to have an unknown impact.

Recommendations For Hitachi Cosminexus versions V4 through V7, update to a version later than V7 or apply a patch if available. For Processing Kit for XML versions prior to 20070511, update to version 20070511 or later. For Developer's Kit for Java versions prior to 20070312, update to version 20070312 or later. As a temporary workaround, consider restricting the use of GIF image processing APIs by Java applications until a patch is available.

Fix

Related Identifiers

CVE-2007-3794

Affected Products

Developer'S Kit For Java

Hitachi Cosminexus

Processing Kit For Xml

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-3794 · Security Note
• http://secunia.com/advisories/26025 · Vendor Advisory
• http://osvdb.org/37851 · Note
• http://vupen.com/english/advisories/2007/2534 · Note
• http://securityfocus.com/bid/24905 · Note
• http://hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html · Note