CVE-2007-2788
- State
- Published
- Severity
- Not scored
- Published
- May 22, 2007
- Updated
- Aug 7, 2024
- Reserved
- May 21, 2007
Description
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 26933third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307177
- [Security-announce] 20080107 VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1mailing-list
- 26049third-party-advisory
- BEA07-177.00vendor-advisory
- 26311third-party-advisory
- 20070703 Sun JDK Confusionmailing-list
- sun-java-image-bo(34652)vdb-entry
- 200856vendor-advisory
- http://scary.beasts.org/security/CESA-2006-004.html
- 30805third-party-advisory
- ADV-2008-0065vdb-entry
- sunjava-iccprofile-overflow(34318)vdb-entry
- VU#138545third-party-advisory
- GLSA-200705-23vendor-advisory
- 24004vdb-entry
- 20071218 Sun JDK Confusion Revisitedmailing-list
- 26369third-party-advisory
- GLSA-200804-28vendor-advisory
- 102934vendor-advisory
- 28056third-party-advisory
- 29858third-party-advisory
- SUSE-SA:2007:045vendor-advisory
- ADV-2007-1836vdb-entry
- APPLE-SA-2007-12-14vendor-advisory
- RHSA-2008:0100vendor-advisory
- RHSA-2007:0956vendor-advisory
- http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html
- RHSA-2007:0817vendor-advisory
- 26645third-party-advisory
- 26119third-party-advisory
- 28365third-party-advisory
- 24267vdb-entry
- 25832third-party-advisory
- ADV-2007-4224vdb-entry
- GLSA-200706-08vendor-advisory
- 30780third-party-advisory
- 25295third-party-advisory
- ADV-2007-3009vdb-entry
- 27266third-party-advisory
- SUSE-SA:2007:056vendor-advisory
- 20070711 Sun JDK Confusionmailing-list
- GLSA-200709-15vendor-advisory
- 28115third-party-advisory
- 1018182vdb-entry
- RHSA-2008:0261vendor-advisory
- 29340third-party-advisory
- 25474third-party-advisory
- RHSA-2007:1086vendor-advisory
- 27203third-party-advisory
- 20070704 [theall at tenablesecurity.com: Sun JDK Confusion] (fwd)mailing-list
- GLSA-200804-20vendor-advisory
- GLSA-200806-11vendor-advisory
- http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html
- RHSA-2007:0829vendor-advisory
- 26631third-party-advisory
- oval:org.mitre.oval:def:11700vdb-entrysignature
- RHSA-2008:0133vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.