CVE-2007-0243
- State
- Published
- Severity
- Not scored
- Published
- Jan 17, 2007
- Updated
- Aug 7, 2024
- Reserved
- Jan 16, 2007
Description
Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20070117 ZDI-07-005: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerabilitymailing-list
- 102760vendor-advisory
- http://docs.info.apple.com/article.html?artnum=307177
- 24468third-party-advisory
- RHSA-2007:0166vendor-advisory
- VU#388289third-party-advisory
- HPSBUX02196vendor-advisory
- 26049third-party-advisory
- ADV-2007-1814vdb-entry
- 24202third-party-advisory
- 20070121 Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability Prove Of Concept Exploitmailing-list
- 25283third-party-advisory
- 32834vdb-entry
- 24189third-party-advisory
- SUSE-SA:2007:045vendor-advisory
- APPLE-SA-2007-12-14vendor-advisory
- 2158third-party-advisory
- 1017520vdb-entry
- RHSA-2007:0956vendor-advisory
- http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html
- oval:org.mitre.oval:def:11073vdb-entrysignature
- 26645third-party-advisory
- RHSA-2007:0167vendor-advisory
- 26119third-party-advisory
- 23757third-party-advisory
- 22085vdb-entry
- ADV-2007-4224vdb-entry
- 24993third-party-advisory
- 28115third-party-advisory
- RHSA-2008:0261vendor-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-005.html
- ADV-2007-0211vdb-entry
- 27203third-party-advisory
- jre-gif-bo(31537)vdb-entry
- ADV-2007-0936vdb-entry
- GLSA-200702-08vendor-advisory
- http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html
- GLSA-200702-07vendor-advisory
- TA07-022Athird-party-advisory
- BEA07-172.00vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.