CVE-2009-4776

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-04-21 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.

Affected products

Hitachi Cosminexus/Opentp1 Web Web Front-Endset: 01-00, 01-00-/b, 01-01, 01-01-/c, 02-00, 02-00-/a (+2)
Hitachi Cosminexus Application Server: 5, 05-00, 05-00-/i, 05-00-/s, 05-01, 05-01-/l (+26)
Hitachi Cosminexus Client: 06-00, 06-00-/i, 06-02, 06-02-/g, 06-50, 06-50-/f (+2)
Hitachi Cosminexus Developer: 5, 05-00, 05-00-/i, 05-01, 05-01-/l, 05-05 (+10)
Hitachi Cosminexus Server: 04-00, 04-00-/a, 04-01, 04-01-/a
Hitachi Cosminexus Studio: 04-00, 04-00-/a, 04-01, 04-01-/a, 05-00, 05-00-/i (+4)
Hitachi Developer'S Kit For Java: all versions
Hitachi Electronic Form Workflow-Developer Client Set: 06-70, 06-70-/f, 07-00, 07-00-/c, 07-10, 07-10-/a (+4)
Hitachi Electronic Form Workflow-Developer Set: 07-50, 07-50-/d, 07-60, 07-60-/i
Hitachi Electronic Form Workflow-Professional Library Set: 06-70, 06-70-/c, 06-70-/f, 07-00, 07-00-/b, 07-00-/c (+6)
Hitachi Electronic Form Workflow-Professional Set: 07-50, 07-50-/d
Hitachi Electronic Form Workflow-Standard Set: 06-70, 06-70-/c, 06-70-/f, 07-00, 07-00-/b, 07-00-/c (+6)
Hitachi Electronic Form Workflow Set: 07-50, 07-50-/d, 07-60, 07-60-/i
Hitachi Groupmax Collaboration: 07-20, 07-20-/d, 07-30, 07-30-/f, 07-35, 07-35-/f
Hitachi Ibm Xl C/C++ V7 For Aix & Hitachi Developer'S Kit For Java: 01-00
Hitachi Ibm Xl C/C++ V8 For Aix & Hitachi Developer'S Kit For Java: 01-00
Hitachi Processing Kit For Xml: 01-00, 01-05, 01-05-/a, 01-05-/b, 01-05-/c, 01-05-/d (+9)
Hitachi Ucosminexus/Opentp1 Web Web Front-Endset: 02-70, 02-70-/a
Hitachi Ucosminexus Application Server: 06-70, 06-70-/a, 06-70-/e, 06-70-/f, 06-70-/g, 06-70-/l (+14)
Hitachi Ucosminexus Client: 06-70, 06-70-/f, 06-71, 06-71-/f, 07-00, 07-60 (+2)
Hitachi Ucosminexus Collaboration: 06-20, 06-20-/d, 06-30, 06-30-/f, 06-35, 06-35-/f
Hitachi Ucosminexus Developer: 6, 06-70, 06-70-/f, 06-71, 06-71-/f, 6.7 (+5)
Hitachi Ucosminexus Operator: 6.7, 7, 07-00, 07-60, 8
Hitachi Ucosminexus Service Architect: 6.7, 7, 07-00, 07-60, 8, 08-00
Hitachi Ucosminexus Service Platform: 6.7, 7, 07-00, 07-10, 07-60, 8 (+1)

References

Get alerted when CVE-2009-4776 or the next vulnerability affects your stack