CVE-2007-2788
NoneCVSS
—
EPSS
18.2%
Published
May 22, 2007
CISA due date
—
The record
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:network_satellite:4.2::el3 | jabberd | 0 | 0:2.0s10-3.37.rhn |
| Red Hat:network_satellite:4.2::el3 | java-1.4.2-ibm | 0 | 0:1.4.2.10-1jpp.2.el3 |
| Red Hat:network_satellite:4.2::el3 | java-1.4.2-ibm-devel | 0 | 0:1.4.2.10-1jpp.2.el3 |
| Red Hat:network_satellite:4.2::el3 | jfreechart | 0 | 0:0.9.20-3.rhn |
| Red Hat:network_satellite:4.2::el3 | openmotif21 | 0 | 0:2.1.30-9.RHEL3.8 |
| Red Hat:network_satellite:4.2::el3 | openmotif21-debuginfo | 0 | 0:2.1.30-9.RHEL3.8 |
| Red Hat:network_satellite:4.2::el3 | perl-Crypt-CBC | 0 | 0:2.24-1.el3 |
| Red Hat:network_satellite:4.2::el3 | rhn-apache | 0 | 0:1.3.27-36.rhn.rhel3 |
| Red Hat:network_satellite:4.2::el3 | rhn-modjk-ap13 | 0 | 0:1.2.23-2rhn.rhel3 |
| Red Hat:network_satellite:4.2::el3 | rhn-modperl | 0 | 0:1.29-16.rhel3 |
| Red Hat:network_satellite:4.2::el3 | rhn-modssl | 0 | 0:2.8.12-8.rhn.10.rhel3 |
| Red Hat:network_satellite:4.2::el3 | tomcat5 | 0 | 0:5.0.30-0jpp_10rh |
| Red Hat:network_satellite:4.2::el4 | jabberd | 0 | 0:2.0s10-3.38.rhn |
| Red Hat:network_satellite:4.2::el4 | java-1.4.2-ibm | 0 | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat:network_satellite:4.2::el4 | java-1.4.2-ibm-devel | 0 | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat:network_satellite:4.2::el4 | jfreechart | 0 | 0:0.9.20-3.rhn |
| Red Hat:network_satellite:4.2::el4 | openmotif21 | 0 | 0:2.1.30-11.RHEL4.6 |
| Red Hat:network_satellite:4.2::el4 | openmotif21-debuginfo | 0 | 0:2.1.30-11.RHEL4.6 |
| Red Hat:network_satellite:4.2::el4 | perl-Crypt-CBC | 0 | 0:2.24-1.el4 |
| Red Hat:network_satellite:4.2::el4 | rhn-apache | 0 | 0:1.3.27-36.rhn.rhel4 |
| Red Hat:network_satellite:4.2::el4 | rhn-modjk-ap13 | 0 | 0:1.2.23-2rhn.rhel4 |
| Red Hat:network_satellite:4.2::el4 | rhn-modperl | 0 | 0:1.29-16.rhel4 |
| Red Hat:network_satellite:4.2::el4 | rhn-modssl | 0 | 0:2.8.12-8.rhn.10.rhel4 |
| Red Hat:network_satellite:4.2::el4 | tomcat5 | 0 | 0:5.0.30-0jpp_10rh |
| Red Hat:network_satellite:5.0:el4 | jabberd | 0 | 0:2.0s10-3.38.rhn |
| Red Hat:network_satellite:5.0:el4 | java-1.4.2-ibm | 0 | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat:network_satellite:5.0:el4 | java-1.4.2-ibm-devel | 0 | 0:1.4.2.10-1jpp.2.el4 |
| Red Hat:network_satellite:5.0:el4 | jfreechart | 0 | 0:0.9.20-3.rhn |
| Red Hat:network_satellite:5.0:el4 | openmotif21 | 0 | 0:2.1.30-11.RHEL4.6 |
| Red Hat:network_satellite:5.0:el4 | openmotif21-debuginfo | 0 | 0:2.1.30-11.RHEL4.6 |
| Red Hat:network_satellite:5.0:el4 | perl-Crypt-CBC | 0 | 0:2.24-1.el4 |
| Red Hat:network_satellite:5.0:el4 | rhn-apache | 0 | 0:1.3.27-36.rhn.rhel4 |
| Red Hat:network_satellite:5.0:el4 | rhn-modjk-ap13 | 0 | 0:1.2.23-2rhn.rhel4 |
| Red Hat:network_satellite:5.0:el4 | rhn-modperl | 0 | 0:1.29-16.rhel4 |
| Red Hat:network_satellite:5.0:el4 | rhn-modssl | 0 | 0:2.8.12-8.rhn.10.rhel4 |
| Red Hat:network_satellite:5.0:el4 | tomcat5 | 0 | 0:5.0.30-0jpp_10rh |
| Red Hat:rhel_extras:3 | java-1.4.2-bea | 0 | 0:1.4.2.16-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-bea-devel | 0 | 0:1.4.2.16-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-bea-jdbc | 0 | 0:1.4.2.16-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm | 0 | 0:1.4.2.9-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-demo | 0 | 0:1.4.2.9-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-devel | 0 | 0:1.4.2.9-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-jdbc | 0 | 0:1.4.2.9-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-plugin | 0 | 0:1.4.2.9-1jpp.1.el3 |
| Red Hat:rhel_extras:3 | java-1.4.2-ibm-src | 0 | 0:1.4.2.9-1jpp.1.el3 |
| Red Hat:rhel_extras:4 | java-1.4.2-bea | 0 | 0:1.4.2.15-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-bea-devel | 0 | 0:1.4.2.15-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-bea-jdbc | 0 | 0:1.4.2.15-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm | 0 | 0:1.4.2.9-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-demo | 0 | 0:1.4.2.9-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-devel | 0 | 0:1.4.2.9-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-javacomm | 0 | 0:1.4.2.9-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-jdbc | 0 | 0:1.4.2.9-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-plugin | 0 | 0:1.4.2.9-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.4.2-ibm-src | 0 | 0:1.4.2.9-1jpp.1.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm | 0 | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-demo | 0 | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-devel | 0 | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat:rhel_extras:4 | java-1.5.0-ibm-src | 0 | 1:1.5.0.5-1jpp.2.el4 |
| Red Hat:rhel_extras:5::client | java-1.4.2-bea | 0 | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-bea-demo | 0 | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-bea-devel | 0 | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-bea-jdbc | 0 | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-bea-missioncontrol | 0 | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-bea-src | 0 | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-demo | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-devel | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-javacomm | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-jdbc | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-plugin | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.4.2-ibm-src | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-demo | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-devel | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat:rhel_extras:5::client | java-1.5.0-ibm-src | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-bea | 0 | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-bea-demo | 0 | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-bea-devel | 0 | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-bea-jdbc | 0 | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-bea-missioncontrol | 0 | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-bea-src | 0 | 0:1.4.2.16-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-demo | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-devel | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-javacomm | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-jdbc | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-plugin | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.4.2-ibm-src | 0 | 0:1.4.2.9-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-bea | 0 | 0:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-bea-demo | 0 | 0:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-bea-devel | 0 | 0:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-bea-jdbc | 0 | 0:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-bea-missioncontrol | 0 | 0:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-bea-src | 0 | 0:1.5.0.11-1jpp.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-demo | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-devel | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-javacomm | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-jdbc | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-plugin | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
| Red Hat:rhel_extras:5::server | java-1.5.0-ibm-src | 0 | 1:1.5.0.5-1jpp.0.1.el5 |
Related vulnerabilities
- CVE-2008-0128 The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat… Also affects jabberd
- CVE-2007-6388 Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0… Also affects jabberd
- CVE-2007-5000 Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP… Also affects jabberd
- CVE-2007-5461 Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0… Also affects jabberd
- CVE-2007-4465 Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server… Also affects jabberd
- CVE-2007-3385 Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3… Also affects jabberd
- CVE-2007-3382 Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3… Also affects jabberd
- CVE-2006-5752 Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in… Also affects jabberd