CVE - CVE-2007-2788

CVE-ID
CVE-2007-2788	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MLIST:[Security-announce] 20080107 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1 URL:http://lists.vmware.com/pipermail/security-announce/2008/000003.html MISC:http://scary.beasts.org/security/CESA-2006-004.html MISC:http://docs.info.apple.com/article.html?artnum=307177 CONFIRM:http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html CONFIRM:http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html APPLE:APPLE-SA-2007-12-14 URL:http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html BEA:BEA07-177.00 URL:http://dev2dev.bea.com/pub/advisory/248 GENTOO:GLSA-200705-23 URL:http://www.gentoo.org/security/en/glsa/glsa-200705-23.xml GENTOO:GLSA-200706-08 URL:http://security.gentoo.org/glsa/glsa-200706-08.xml GENTOO:GLSA-200709-15 URL:http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml GENTOO:GLSA-200804-20 URL:http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml GENTOO:GLSA-200804-28 URL:http://security.gentoo.org/glsa/glsa-200804-28.xml GENTOO:GLSA-200806-11 URL:http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml REDHAT:RHSA-2007:0829 URL:http://www.redhat.com/support/errata/RHSA-2007-0829.html REDHAT:RHSA-2007:0956 URL:http://www.redhat.com/support/errata/RHSA-2007-0956.html REDHAT:RHSA-2007:1086 URL:http://www.redhat.com/support/errata/RHSA-2007-1086.html REDHAT:RHSA-2007:0817 URL:http://www.redhat.com/support/errata/RHSA-2007-0817.html REDHAT:RHSA-2008:0100 URL:http://www.redhat.com/support/errata/RHSA-2008-0100.html REDHAT:RHSA-2008:0261 URL:http://www.redhat.com/support/errata/RHSA-2008-0261.html REDHAT:RHSA-2008:0133 URL:http://www.redhat.com/support/errata/RHSA-2008-0133.html SUNALERT:102934 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102934-1 SUNALERT:200856 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-200856-1 SUSE:SUSE-SA:2007:045 URL:http://www.novell.com/linux/security/advisories/2007_45_java.html SUSE:SUSE-SA:2007:056 URL:http://www.novell.com/linux/security/advisories/2007_56_ibmjava.html CERT-VN:VU#138545 URL:http://www.kb.cert.org/vuls/id/138545 VIM:20070703 Sun JDK Confusion URL:http://www.attrition.org/pipermail/vim/2007-July/001696.html VIM:20070704 [theall at tenablesecurity.com: Sun JDK Confusion] (fwd) URL:http://www.attrition.org/pipermail/vim/2007-July/001697.html VIM:20070711 Sun JDK Confusion URL:http://www.attrition.org/pipermail/vim/2007-July/001708.html VIM:20071218 Sun JDK Confusion Revisited URL:http://www.attrition.org/pipermail/vim/2007-December/001862.html BID:24004 URL:http://www.securityfocus.com/bid/24004 BID:24267 URL:http://www.securityfocus.com/bid/24267 OVAL:oval:org.mitre.oval:def:11700 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11700 VUPEN:ADV-2007-1836 URL:http://www.vupen.com/english/advisories/2007/1836 VUPEN:ADV-2007-3009 URL:http://www.vupen.com/english/advisories/2007/3009 VUPEN:ADV-2007-4224 URL:http://www.vupen.com/english/advisories/2007/4224 VUPEN:ADV-2008-0065 URL:http://www.vupen.com/english/advisories/2008/0065 SECTRACK:1018182 URL:http://www.securitytracker.com/id?1018182 SECUNIA:25295 URL:http://secunia.com/advisories/25295 SECUNIA:25474 URL:http://secunia.com/advisories/25474 SECUNIA:25832 URL:http://secunia.com/advisories/25832 SECUNIA:26049 URL:http://secunia.com/advisories/26049 SECUNIA:26119 URL:http://secunia.com/advisories/26119 SECUNIA:26369 URL:http://secunia.com/advisories/26369 SECUNIA:26933 URL:http://secunia.com/advisories/26933 SECUNIA:27203 URL:http://secunia.com/advisories/27203 SECUNIA:27266 URL:http://secunia.com/advisories/27266 SECUNIA:26645 URL:http://secunia.com/advisories/26645 SECUNIA:28056 URL:http://secunia.com/advisories/28056 SECUNIA:26311 URL:http://secunia.com/advisories/26311 SECUNIA:26631 URL:http://secunia.com/advisories/26631 SECUNIA:28115 URL:http://secunia.com/advisories/28115 SECUNIA:28365 URL:http://secunia.com/advisories/28365 SECUNIA:29340 URL:http://secunia.com/advisories/29340 SECUNIA:29858 URL:http://secunia.com/advisories/29858 SECUNIA:30780 URL:http://secunia.com/advisories/30780 SECUNIA:30805 URL:http://secunia.com/advisories/30805 XF:sunjava-iccprofile-overflow(34318) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/34318 XF:sun-java-image-bo(34652) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/34652
Assigning CNA
N/A
Date Entry Created
20070521	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org