NVD

Id
54952  
Name
CVE-2007-2788  
Description
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-05-21  
Modified Date
2011-03-07  
Seq
2007-2788  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
278903 54952 CVE-2007-2788 BEA07-177.00  View
278904 54952 CVE-2007-2788 http://docs.info.apple.com/article.html?artnum=307177  View
278905 54952 CVE-2007-2788 APPLE-SA-2007-12-14  View
278906 54952 CVE-2007-2788 [Security-announce] 20080107 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1  View
278907 54952 CVE-2007-2788 oval:org.mitre.oval:def:11700  View
278908 54952 CVE-2007-2788 http://scary.beasts.org/security/CESA-2006-004.html  View
278909 54952 CVE-2007-2788 GLSA-200706-08  View
278910 54952 CVE-2007-2788 GLSA-200804-28  View
278911 54952 CVE-2007-2788 102934  View
278912 54952 CVE-2007-2788 200856  View
278913 54952 CVE-2007-2788 http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html  View
278914 54952 CVE-2007-2788 http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html  View
278915 54952 CVE-2007-2788 20071218 Sun JDK Confusion Revisited  View
278916 54952 CVE-2007-2788 20070703 Sun JDK Confusion  View
278917 54952 CVE-2007-2788 20070704 [theall at tenablesecurity.com: Sun JDK Confusion] (fwd)  View
278918 54952 CVE-2007-2788 20070711 Sun JDK Confusion  View
278919 54952 CVE-2007-2788 GLSA-200705-23  View
278920 54952 CVE-2007-2788 GLSA-200709-15  View
278921 54952 CVE-2007-2788 GLSA-200804-20  View
278922 54952 CVE-2007-2788 GLSA-200806-11  View
278923 54952 CVE-2007-2788 VU#138545  View
278924 54952 CVE-2007-2788 SUSE-SA:2007:045  View
278925 54952 CVE-2007-2788 SUSE-SA:2007:056  View
278926 54952 CVE-2007-2788 RHSA-2007:0817  View
278927 54952 CVE-2007-2788 RHSA-2007:0829  View
278928 54952 CVE-2007-2788 RHSA-2007:0956  View
278929 54952 CVE-2007-2788 RHSA-2007:1086  View
278930 54952 CVE-2007-2788 RHSA-2008:0100  View
278931 54952 CVE-2007-2788 RHSA-2008:0133  View
278932 54952 CVE-2007-2788 RHSA-2008:0261  View
278933 54952 CVE-2007-2788 24004  View
278934 54952 CVE-2007-2788 24267  View
278935 54952 CVE-2007-2788 1018182  View
278936 54952 CVE-2007-2788 ADV-2007-1836  View
278937 54952 CVE-2007-2788 ADV-2007-3009  View
278938 54952 CVE-2007-2788 ADV-2007-4224  View
278939 54952 CVE-2007-2788 ADV-2008-0065  View
278940 54952 CVE-2007-2788 sunjava-iccprofile-overflow(34318)  View
278941 54952 CVE-2007-2788 sun-java-image-bo(34652)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51767 JVNDB-2007-000430 JRE (Java Runtime Environment) のイメージ解析コードにバッファオーバーフローの脆弱性 JRE (Java Runtime Environment) のイメージ解析コードには、バッファオーバーフローの脆弱性が存在します。 CVE-2007-2788 26143 CVE-2007-2788 54952 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000430.html 2007-05-15 2008-07-07 View