Patchwire CVEs, their patch status, and feeds to follow them

CVE-2007-2789

Fixed in a distro release EPSS 3%

The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.

Published 2007-05-22 · CVE record · OSV

Products: sun jdk, sun jre, sun sdk

Distro releases

ReleasePackageFixed in
Red Hat network satellite 4.2jabberd0:2.0s10-3.37.rhn
Red Hat network satellite 4.2jabberd0:2.0s10-3.38.rhn
Red Hat network satellite 4.2java-1.4.2-ibm0:1.4.2.10-1jpp.2.el3
Red Hat network satellite 4.2java-1.4.2-ibm0:1.4.2.10-1jpp.2.el4
Red Hat network satellite 4.2java-1.4.2-ibm-devel0:1.4.2.10-1jpp.2.el3
Red Hat network satellite 4.2java-1.4.2-ibm-devel0:1.4.2.10-1jpp.2.el4
Red Hat network satellite 4.2jfreechart0:0.9.20-3.rhn
Red Hat network satellite 4.2openmotif210:2.1.30-11.RHEL4.6
Red Hat network satellite 4.2openmotif210:2.1.30-9.RHEL3.8
Red Hat network satellite 4.2openmotif21-debuginfo0:2.1.30-9.RHEL3.8
Red Hat network satellite 4.2openmotif21-debuginfo0:2.1.30-11.RHEL4.6
Red Hat network satellite 4.2perl-Crypt-CBC0:2.24-1.el4
Red Hat network satellite 4.2perl-Crypt-CBC0:2.24-1.el3
Red Hat network satellite 4.2rhn-apache0:1.3.27-36.rhn.rhel4
Red Hat network satellite 4.2rhn-apache0:1.3.27-36.rhn.rhel3
Red Hat network satellite 4.2rhn-modjk-ap130:1.2.23-2rhn.rhel4
Red Hat network satellite 4.2rhn-modjk-ap130:1.2.23-2rhn.rhel3
Red Hat network satellite 4.2rhn-modperl0:1.29-16.rhel3
Red Hat network satellite 4.2rhn-modperl0:1.29-16.rhel4
Red Hat network satellite 4.2rhn-modssl0:2.8.12-8.rhn.10.rhel3
Red Hat network satellite 4.2rhn-modssl0:2.8.12-8.rhn.10.rhel4
Red Hat network satellite 4.2tomcat50:5.0.30-0jpp_10rh
Red Hat network satellite 5.0 el4jabberd0:2.0s10-3.38.rhn
Red Hat network satellite 5.0 el4java-1.4.2-ibm0:1.4.2.10-1jpp.2.el4
Red Hat network satellite 5.0 el4java-1.4.2-ibm-devel0:1.4.2.10-1jpp.2.el4
Red Hat network satellite 5.0 el4jfreechart0:0.9.20-3.rhn
Red Hat network satellite 5.0 el4openmotif210:2.1.30-11.RHEL4.6
Red Hat network satellite 5.0 el4openmotif21-debuginfo0:2.1.30-11.RHEL4.6
Red Hat network satellite 5.0 el4perl-Crypt-CBC0:2.24-1.el4
Red Hat network satellite 5.0 el4rhn-apache0:1.3.27-36.rhn.rhel4
Red Hat network satellite 5.0 el4rhn-modjk-ap130:1.2.23-2rhn.rhel4
Red Hat network satellite 5.0 el4rhn-modperl0:1.29-16.rhel4
Red Hat network satellite 5.0 el4rhn-modssl0:2.8.12-8.rhn.10.rhel4
Red Hat network satellite 5.0 el4tomcat50:5.0.30-0jpp_10rh
Red Hat rhel extras 3java-1.4.2-bea0:1.4.2.16-1jpp.1.el3
Red Hat rhel extras 3java-1.4.2-bea-devel0:1.4.2.16-1jpp.1.el3
Red Hat rhel extras 3java-1.4.2-bea-jdbc0:1.4.2.16-1jpp.1.el3
Red Hat rhel extras 3java-1.4.2-ibm0:1.4.2.9-1jpp.1.el3
Red Hat rhel extras 3java-1.4.2-ibm-demo0:1.4.2.9-1jpp.1.el3
Red Hat rhel extras 3java-1.4.2-ibm-devel0:1.4.2.9-1jpp.1.el3
Red Hat rhel extras 3java-1.4.2-ibm-jdbc0:1.4.2.9-1jpp.1.el3
Red Hat rhel extras 3java-1.4.2-ibm-plugin0:1.4.2.9-1jpp.1.el3
Red Hat rhel extras 3java-1.4.2-ibm-src0:1.4.2.9-1jpp.1.el3
Red Hat rhel extras 4java-1.4.2-bea0:1.4.2.15-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-bea-devel0:1.4.2.15-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-bea-jdbc0:1.4.2.15-1jpp.2.el4
Red Hat rhel extras 4java-1.4.2-ibm0:1.4.2.9-1jpp.1.el4
Red Hat rhel extras 4java-1.4.2-ibm-demo0:1.4.2.9-1jpp.1.el4
Red Hat rhel extras 4java-1.4.2-ibm-devel0:1.4.2.9-1jpp.1.el4
Red Hat rhel extras 4java-1.4.2-ibm-javacomm0:1.4.2.9-1jpp.1.el4
Red Hat rhel extras 4java-1.4.2-ibm-jdbc0:1.4.2.9-1jpp.1.el4
Red Hat rhel extras 4java-1.4.2-ibm-plugin0:1.4.2.9-1jpp.1.el4
Red Hat rhel extras 4java-1.4.2-ibm-src0:1.4.2.9-1jpp.1.el4
Red Hat rhel extras 4java-1.5.0-ibm1:1.5.0.5-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-demo1:1.5.0.5-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-devel1:1.5.0.5-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-javacomm1:1.5.0.5-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-jdbc1:1.5.0.5-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-plugin1:1.5.0.5-1jpp.2.el4
Red Hat rhel extras 4java-1.5.0-ibm-src1:1.5.0.5-1jpp.2.el4
Red Hat rhel extras 5java-1.4.2-bea0:1.4.2.16-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-bea-demo0:1.4.2.16-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-bea-devel0:1.4.2.16-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-bea-jdbc0:1.4.2.16-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-bea-missioncontrol0:1.4.2.16-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-bea-src0:1.4.2.16-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-ibm0:1.4.2.9-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-ibm-demo0:1.4.2.9-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-ibm-devel0:1.4.2.9-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-ibm-javacomm0:1.4.2.9-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-ibm-jdbc0:1.4.2.9-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-ibm-plugin0:1.4.2.9-1jpp.1.el5
Red Hat rhel extras 5java-1.4.2-ibm-src0:1.4.2.9-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-bea0:1.5.0.11-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-bea-demo0:1.5.0.11-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-bea-devel0:1.5.0.11-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-bea-jdbc0:1.5.0.11-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-bea-missioncontrol0:1.5.0.11-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-bea-src0:1.5.0.11-1jpp.1.el5
Red Hat rhel extras 5java-1.5.0-ibm1:1.5.0.5-1jpp.0.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-demo1:1.5.0.5-1jpp.0.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-devel1:1.5.0.5-1jpp.0.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-javacomm1:1.5.0.5-1jpp.0.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-jdbc1:1.5.0.5-1jpp.0.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-plugin1:1.5.0.5-1jpp.0.1.el5
Red Hat rhel extras 5java-1.5.0-ibm-src1:1.5.0.5-1jpp.0.1.el5