NVD

Id
54953  
Name
CVE-2007-2789  
Description
The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-05-21  
Modified Date
2011-03-07  
Seq
2007-2789  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
278942 54953 CVE-2007-2789 BEA07-177.00  View
278943 54953 CVE-2007-2789 http://docs.info.apple.com/article.html?artnum=307177  View
278944 54953 CVE-2007-2789 APPLE-SA-2007-12-14  View
278945 54953 CVE-2007-2789 oval:org.mitre.oval:def:10800  View
278946 54953 CVE-2007-2789 http://scary.beasts.org/security/CESA-2006-004.html  View
278947 54953 CVE-2007-2789 GLSA-200706-08  View
278948 54953 CVE-2007-2789 GLSA-200804-28  View
278949 54953 CVE-2007-2789 102934  View
278950 54953 CVE-2007-2789 200856  View
278951 54953 CVE-2007-2789 http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html  View
278952 54953 CVE-2007-2789 http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html  View
278953 54953 CVE-2007-2789 20071218 Sun JDK Confusion Revisited  View
278954 54953 CVE-2007-2789 20070703 Sun JDK Confusion  View
278955 54953 CVE-2007-2789 20070704 [theall at tenablesecurity.com: Sun JDK Confusion] (fwd)  View
278956 54953 CVE-2007-2789 20070711 Sun JDK Confusion  View
278957 54953 CVE-2007-2789 GLSA-200705-23  View
278958 54953 CVE-2007-2789 GLSA-200709-15  View
278959 54953 CVE-2007-2789 GLSA-200804-20  View
278960 54953 CVE-2007-2789 GLSA-200806-11  View
278961 54953 CVE-2007-2789 SUSE-SA:2007:045  View
278962 54953 CVE-2007-2789 SUSE-SA:2007:056  View
278963 54953 CVE-2007-2789 RHSA-2007:0817  View
278964 54953 CVE-2007-2789 RHSA-2007:0829  View
278965 54953 CVE-2007-2789 RHSA-2007:0956  View
278966 54953 CVE-2007-2789 RHSA-2007:1086  View
278967 54953 CVE-2007-2789 RHSA-2008:0100  View
278968 54953 CVE-2007-2789 RHSA-2008:0133  View
278969 54953 CVE-2007-2789 RHSA-2008:0261  View
278970 54953 CVE-2007-2789 24004  View
278971 54953 CVE-2007-2789 1018182  View
278972 54953 CVE-2007-2789 ADV-2007-1836  View
278973 54953 CVE-2007-2789 ADV-2007-3009  View
278974 54953 CVE-2007-2789 ADV-2007-4224  View
278975 54953 CVE-2007-2789 sunjava-bmp-dos(34320)  View
278976 54953 CVE-2007-2789 sun-java-virtual-machine-dos(34654)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51768 JVNDB-2007-000431 Sun Java Runtime Environment の Java 仮想マシンにおけるサービス運用妨害 (DoS) の脆弱性 Sun Java Runtime Environment (JRE) には、不正なアプレットやアプリケーションの操作により Java 仮想マシンがハングアップし、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-2789 26144 CVE-2007-2789 54953 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000431.html 2007-05-15 2008-07-07 View