CVE-2007-2789

Published: 22/05/2007 Updated: 01/08/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The BMP image parser in Sun Java Development Kit (JDK) prior to 1.5.0_11-b03 and 1.6.x prior to 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and previous versions, SDK and JRE 1.4.2_14 and previous versions, and SDK and JRE 1.3.1_19 and previous versions, when running on Unix/Linux systems, allows remote malicious users to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sun jdk 1.5.0
sun jdk 1.6.0
sun jre 1.4.2 7
sun jre 1.3.1 10
sun jre 1.3.1 06
sun jre 1.4.2 4
sun jre 1.4.2 2
sun jre 1.5.0
sun jre 1.3.1 2
sun jre 1.4.2 13
sun jre 1.4.2 1
sun jre 1.4.2 8
sun jre 1.3.1 16
sun jre 1.3.1 19
sun jre 1.3.1 11
sun jre 1.3.1 17
sun jre 1.4.2 12
sun jre 1.3.1 12
sun jre 1.3.1 03
sun jre 1.3.1 14
sun jre 1.3.1 08
sun jre 1.4.2 14
sun jre 1.3.1 07
sun jre 1.3.1 05
sun jre 1.4.2 10
sun jre 1.4.2 9
sun jre 1.3.1 13
sun jre 1.3.1 04
sun jre 1.3.1 09
sun jre 1.4.2 11
sun jre 1.3.1 18
sun jre 1.3.1 15
sun jre 1.4.2 3
sun jre 1.4.2 5
sun jre 1.4.2 6
sun jre 1.4.2
sun jre 1.3.1
sun jre 1.6.0
sun sdk 1.3.1 03
sun sdk 1.4.2
sun sdk 1.3.1 19
sun sdk 1.3.1
sun sdk 1.3.1 08
sun sdk 1.4.2 10
sun sdk 1.4.2 12
sun sdk 1.3.1 15
sun sdk 1.4.2 14
sun sdk 1.4.2 13
sun sdk 1.4.2 6
sun sdk 1.3.1 07
sun sdk 1.4.2 2
sun sdk 1.3.1 10
sun sdk 1.4.2 5
sun sdk 1.3.1 06
sun sdk 1.4.2 1
sun sdk 1.3.1 12
sun sdk 1.4.2 4
sun sdk 1.3.1 17
sun sdk 1.3.1 02
sun sdk 1.3.1 18
sun sdk 1.3.1 01
sun sdk 1.3.1 16
sun sdk 1.3.1 01a
sun sdk 1.3.1 14
sun sdk 1.4.2 7
sun sdk 1.3.1 13
sun sdk 1.4.2 8
sun sdk 1.4.2 11
sun sdk 1.3.1 09
sun sdk 1.4.2 9
sun sdk 1.3.1 04
sun sdk 1.3.1 05
sun sdk 1.4.2 3
sun sdk 1.3.1 11

CWE-399 http://scary.beasts.org/security/CESA-2006-004.html http://www.securityfocus.com/bid/24004 http://secunia.com/advisories/25295 http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html http://www.gentoo.org/security/en/glsa/glsa-200705-23.xml http://security.gentoo.org/glsa/glsa-200706-08.xml http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml http://www.redhat.com/support/errata/RHSA-2007-0829.html http://www.redhat.com/support/errata/RHSA-2007-0956.html http://www.novell.com/linux/security/advisories/2007_45_java.html http://www.novell.com/linux/security/advisories/2007_56_ibmjava.html http://secunia.com/advisories/25474 http://secunia.com/advisories/25832 http://secunia.com/advisories/26049 http://secunia.com/advisories/26119 http://secunia.com/advisories/26369 http://secunia.com/advisories/26933 http://secunia.com/advisories/27203 http://secunia.com/advisories/27266 http://secunia.com/advisories/26645 http://docs.info.apple.com/article.html?artnum=307177 http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html http://dev2dev.bea.com/pub/advisory/248 http://www.redhat.com/support/errata/RHSA-2007-1086.html http://www.redhat.com/support/errata/RHSA-2007-0817.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-102934-1 http://www.attrition.org/pipermail/vim/2007-July/001696.html http://www.attrition.org/pipermail/vim/2007-July/001697.html http://www.attrition.org/pipermail/vim/2007-July/001708.html http://www.attrition.org/pipermail/vim/2007-December/001862.html http://www.securitytracker.com/id?1018182 http://secunia.com/advisories/28056 http://secunia.com/advisories/26311 http://secunia.com/advisories/26631 http://secunia.com/advisories/28115 http://www.redhat.com/support/errata/RHSA-2008-0100.html http://sunsolve.sun.com/search/document.do?assetkey=1-66-200856-1 http://secunia.com/advisories/29340 http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml http://secunia.com/advisories/29858 http://security.gentoo.org/glsa/glsa-200804-28.xml http://www.redhat.com/support/errata/RHSA-2008-0261.html http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml http://www.redhat.com/support/errata/RHSA-2008-0133.html http://secunia.com/advisories/30780 http://secunia.com/advisories/30805 http://www.vupen.com/english/advisories/2007/1836 http://www.vupen.com/english/advisories/2007/4224 http://www.vupen.com/english/advisories/2007/3009 https://exchange.xforce.ibmcloud.com/vulnerabilities/34654 https://exchange.xforce.ibmcloud.com/vulnerabilities/34320 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10800 https://nvd.nist.gov

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook