CVE - CVE-2007-2789

CVE-ID
CVE-2007-2789	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:http://scary.beasts.org/security/CESA-2006-004.html MISC:http://docs.info.apple.com/article.html?artnum=307177 CONFIRM:http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html CONFIRM:http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html APPLE:APPLE-SA-2007-12-14 URL:http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html BEA:BEA07-177.00 URL:http://dev2dev.bea.com/pub/advisory/248 GENTOO:GLSA-200705-23 URL:http://www.gentoo.org/security/en/glsa/glsa-200705-23.xml GENTOO:GLSA-200706-08 URL:http://security.gentoo.org/glsa/glsa-200706-08.xml GENTOO:GLSA-200709-15 URL:http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml GENTOO:GLSA-200804-20 URL:http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml GENTOO:GLSA-200804-28 URL:http://security.gentoo.org/glsa/glsa-200804-28.xml GENTOO:GLSA-200806-11 URL:http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml REDHAT:RHSA-2007:0829 URL:http://www.redhat.com/support/errata/RHSA-2007-0829.html REDHAT:RHSA-2007:0956 URL:http://www.redhat.com/support/errata/RHSA-2007-0956.html REDHAT:RHSA-2007:1086 URL:http://www.redhat.com/support/errata/RHSA-2007-1086.html REDHAT:RHSA-2007:0817 URL:http://www.redhat.com/support/errata/RHSA-2007-0817.html REDHAT:RHSA-2008:0100 URL:http://www.redhat.com/support/errata/RHSA-2008-0100.html REDHAT:RHSA-2008:0261 URL:http://www.redhat.com/support/errata/RHSA-2008-0261.html REDHAT:RHSA-2008:0133 URL:http://www.redhat.com/support/errata/RHSA-2008-0133.html SUNALERT:102934 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102934-1 SUNALERT:200856 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-200856-1 SUSE:SUSE-SA:2007:045 URL:http://www.novell.com/linux/security/advisories/2007_45_java.html SUSE:SUSE-SA:2007:056 URL:http://www.novell.com/linux/security/advisories/2007_56_ibmjava.html VIM:20070703 Sun JDK Confusion URL:http://www.attrition.org/pipermail/vim/2007-July/001696.html VIM:20070704 [theall at tenablesecurity.com: Sun JDK Confusion] (fwd) URL:http://www.attrition.org/pipermail/vim/2007-July/001697.html VIM:20070711 Sun JDK Confusion URL:http://www.attrition.org/pipermail/vim/2007-July/001708.html VIM:20071218 Sun JDK Confusion Revisited URL:http://www.attrition.org/pipermail/vim/2007-December/001862.html BID:24004 URL:http://www.securityfocus.com/bid/24004 OVAL:oval:org.mitre.oval:def:10800 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10800 VUPEN:ADV-2007-1836 URL:http://www.vupen.com/english/advisories/2007/1836 VUPEN:ADV-2007-3009 URL:http://www.vupen.com/english/advisories/2007/3009 VUPEN:ADV-2007-4224 URL:http://www.vupen.com/english/advisories/2007/4224 SECTRACK:1018182 URL:http://www.securitytracker.com/id?1018182 SECUNIA:25295 URL:http://secunia.com/advisories/25295 SECUNIA:25474 URL:http://secunia.com/advisories/25474 SECUNIA:25832 URL:http://secunia.com/advisories/25832 SECUNIA:26049 URL:http://secunia.com/advisories/26049 SECUNIA:26119 URL:http://secunia.com/advisories/26119 SECUNIA:26369 URL:http://secunia.com/advisories/26369 SECUNIA:26933 URL:http://secunia.com/advisories/26933 SECUNIA:27203 URL:http://secunia.com/advisories/27203 SECUNIA:27266 URL:http://secunia.com/advisories/27266 SECUNIA:26645 URL:http://secunia.com/advisories/26645 SECUNIA:28056 URL:http://secunia.com/advisories/28056 SECUNIA:26311 URL:http://secunia.com/advisories/26311 SECUNIA:26631 URL:http://secunia.com/advisories/26631 SECUNIA:28115 URL:http://secunia.com/advisories/28115 SECUNIA:29340 URL:http://secunia.com/advisories/29340 SECUNIA:29858 URL:http://secunia.com/advisories/29858 SECUNIA:30780 URL:http://secunia.com/advisories/30780 SECUNIA:30805 URL:http://secunia.com/advisories/30805 XF:sunjava-bmp-dos(34320) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/34320 XF:sun-java-virtual-machine-dos(34654) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/34654
Assigning CNA
N/A
Date Entry Created
20070521	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org