CVE-2007-3794: hitachi cosminexus_application_server
Vulnerability summary
CVE-2007-3794 is a high (CVSS 10.0) vulnerability in hitachi cosminexus_application_server. EPSS estimates a 2.19% chance of exploitation in the next 30 days, higher than 82.1% of scored vulnerabilities.
Timeline
- 15-07-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.19%
Chance of exploitation in the next 30 days
Percentile
82%
Versus all other CVEs
30-day change
0.00 pp
From 2.19% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Hitachi11 products
- cosminexus_application_server05_00_05_00_h | 05_01_05_01_k | 05_05_05_00_o | 06_00_06_00_g | 06_02_06_02_f | 06_50_06_50_e | 06_51_06_51_g | 05_05_05_05_h | 06_00_06_00_b | 06_00_06_00_d | 06_50_06_50_b | 06_50_06_50_c | 06_51_06_51_b | 06_51_06_51_c | 05_02_05_02_e | 06_00_06_00_e | 06_50_06_50_d | 05_00_05_00_r | 05_05_05_05_l | 06_50_06_50_f | 06_00_06_00_a
- cosminexus_client06_00_06_00_g | 06_02_06_02_f | 06_50_06_50_e | 06_51_06_51_g
- cosminexus_developer05_00_05_00_h | 05_01_05_01_k | 05_05_05_05_o | 06_00_06_00_g | 06_02_06_02_f | 06_50_06_50_e | 06_51_06_51_g
- cosminexus_server04_00_04_00_a | 04_01_04_01_a
- cosminexus_studio04_00_04_00_a | 04_01_04_01_a | 05_05_05_05_o
1 vendor · 11 products
References
5 links- www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.htmlX Refsource CONFIRM