CVE-2007-2788

Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.

Link	Resource
http://scary.beasts.org/security/CESA-2006-004.html	Third Party Advisory
http://www.securityfocus.com/bid/24004	Third Party Advisory VDB Entry
http://secunia.com/advisories/25295	Patch Third Party Advisory
http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html	Third Party Advisory
http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200705-23.xml	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200706-08.xml	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0829.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0956.html	Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_45_java.html	Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_56_ibmjava.html	Third Party Advisory
http://secunia.com/advisories/25474	Third Party Advisory
http://secunia.com/advisories/25832	Third Party Advisory
http://secunia.com/advisories/26049	Third Party Advisory
http://secunia.com/advisories/26119	Third Party Advisory
http://secunia.com/advisories/26369	Third Party Advisory
http://secunia.com/advisories/26933	Third Party Advisory
http://secunia.com/advisories/27203	Third Party Advisory
http://secunia.com/advisories/27266	Third Party Advisory
http://secunia.com/advisories/26645	Third Party Advisory
http://docs.info.apple.com/article.html?artnum=307177	Broken Link
http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html	Mailing List Third Party Advisory
http://dev2dev.bea.com/pub/advisory/248	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-1086.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0817.html	Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102934-1	Broken Link
http://www.kb.cert.org/vuls/id/138545	Third Party Advisory US Government Resource
http://www.attrition.org/pipermail/vim/2007-July/001696.html	Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-July/001697.html	Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-July/001708.html	Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-December/001862.html	Third Party Advisory
http://www.securityfocus.com/bid/24267	Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1018182	Third Party Advisory VDB Entry
http://secunia.com/advisories/28056	Third Party Advisory
http://secunia.com/advisories/26311	Third Party Advisory
http://secunia.com/advisories/26631	Third Party Advisory
http://secunia.com/advisories/28115	Third Party Advisory
http://lists.vmware.com/pipermail/security-announce/2008/000003.html	Mailing List Third Party Advisory
http://secunia.com/advisories/28365	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0100.html	Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200856-1	Broken Link
http://secunia.com/advisories/29340	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml	Third Party Advisory
http://secunia.com/advisories/29858	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200804-28.xml	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0261.html	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0133.html	Third Party Advisory
http://secunia.com/advisories/30780	Third Party Advisory
http://secunia.com/advisories/30805	Third Party Advisory
http://www.vupen.com/english/advisories/2007/1836	Permissions Required
http://www.vupen.com/english/advisories/2008/0065	Permissions Required
http://www.vupen.com/english/advisories/2007/4224	Permissions Required
http://www.vupen.com/english/advisories/2007/3009	Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/34652	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34318	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11700	Third Party Advisory

Configuration 1

cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:* cpe:2.3:a:sun:jdk:1.6.0:-:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.4.2:-:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.3.1:-:*:*:*:*:*:* cpe:2.3:a:sun:jre:1.6.0:-:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_2:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:* cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*

---

Published : 2007-05-22 12:30

Updated : 2019-08-01 12:21

---

NVD link : CVE-2007-2788

Mitre link : CVE-2007-2788

No products.

CWE-189