CVE-2007-3794

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-15 · updated 2026-06-16

Description

Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.

Affected products

Hitachi Cosminexus Application Server: 05_00_05_00_h, 05_01_05_01_k, 05_05_05_00_o, 06_00_06_00_g, 06_02_06_02_f, 06_50_06_50_e (+15)
Hitachi Cosminexus Client: 06_00_06_00_g, 06_02_06_02_f, 06_50_06_50_e, 06_51_06_51_g
Hitachi Cosminexus Developer: 05_00_05_00_h, 05_01_05_01_k, 05_05_05_05_o, 06_00_06_00_g, 06_02_06_02_f, 06_50_06_50_e (+1)
Hitachi Cosminexus Server: 04_00_04_00_a, 04_01_04_01_a
Hitachi Cosminexus Studio: 04_00_04_00_a, 04_01_04_01_a, 05_05_05_05_o
Hitachi Ucosminexus Application Server: 06_70_06_70_a, 06_70_06_70_b, 06_71_06_71_b, 07_00_07_20, 07_00_07_10, 06_70_06_70_h (+5)
Hitachi Ucosminexus Client: 06_70_06_70_b, 06_71_06_71_b, 07_00_07_20
Hitachi Ucosminexus Developer: 06_70_06_70_b, 06_71_06_71_b
Hitachi Ucosminexus Operator: 07_00_07_20
Hitachi Ucosminexus Service Architect: 07_00_07_20
Hitachi Ucosminexus Service Platform: 07_00_07_20, 07_00_07_10, 07_10

References

Get alerted when CVE-2007-3794 or the next vulnerability affects your stack