CVE-2007-3794 describes a critical buffer overflow vulnerability affecting Hitachi Cosminexus V4 through V7, Processing Kit for XML, and Developer's Kit for Java, as well as third-party products utilizing these components. This flaw allows unauthenticated attackers to achieve complete compromise (confidentiality, integrity, and availability) by exploiting a Java application's GIF image processing APIs. Despite its maximum CVSS score of 10.0, indicating severe risk, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
05_00_05_00_hCPE matchmatch criteria | cpe:2.3:a:hitachi:cosminexus_application_server:05_00_05_00_h:*:*:*:*:*:*:* | ||
05_01_05_01_kCPE matchmatch criteria | cpe:2.3:a:hitachi:cosminexus_application_server:05_01_05_01_k:*:*:*:*:*:*:* | ||
05_05_05_00_oCPE matchmatch criteria | cpe:2.3:a:hitachi:cosminexus_application_server:05_05_05_00_o:*:*:*:*:*:*:* | ||
06_00_06_00_gCPE matchmatch criteria | cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_g:*:enterprise:*:*:*:*:* | ||
06_00_06_00_gCPE matchmatch criteria | cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_g:*:standard:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.