Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2009-4776
HistoryApr 21, 2010 - 2:30 p.m.

CVE-2009-4776

2010-04-2114:30:00
CWE-119
mitre
web.nvd.nist.gov
26
cve-2009-4776
buffer overflow
hitachi cosminexus
xml
java
ucosminexus
electronic form workflow
groupmax
ibm
gif
image processing
security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7

Confidence

Low

EPSS

0.015

Percentile

87.4%

JSON

Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer’s Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.

Affected configurations

Nvd
Node
hitachiucosminexus\/opentp1_web_web_front-endsetMatch02-70
OR
hitachiucosminexus\/opentp1_web_web_front-endsetMatch02-70-\/a
OR
hitachiucosminexus_application_serverMatch06-70-enterprise
OR
hitachiucosminexus_application_serverMatch06-70-standard
OR
hitachiucosminexus_application_serverMatch06-70-\/a-enterprise
OR
hitachiucosminexus_application_serverMatch06-70-\/a-standard
OR
hitachiucosminexus_application_serverMatch06-70-\/e-enterprise
OR
hitachiucosminexus_application_serverMatch06-70-\/e-standard
OR
hitachiucosminexus_application_serverMatch06-70-\/f-enterprise
OR
hitachiucosminexus_application_serverMatch06-70-\/f-standard
OR
hitachiucosminexus_application_serverMatch06-70-\/g-enterprise
OR
hitachiucosminexus_application_serverMatch06-70-\/g-standard
OR
hitachiucosminexus_application_serverMatch06-70-\/l-enterprise
OR
hitachiucosminexus_application_serverMatch06-70-\/l-standard
OR
hitachiucosminexus_application_serverMatch06-70-\/n-enterprise
OR
hitachiucosminexus_application_serverMatch06-70-\/n-standard
OR
hitachiucosminexus_application_serverMatch06-70f-enterprise
OR
hitachiucosminexus_application_serverMatch06-70f-standard
OR
hitachiucosminexus_application_serverMatch06-71-enterprise
OR
hitachiucosminexus_application_serverMatch06-71-standard
OR
hitachiucosminexus_application_serverMatch06-71-\/f-enterprise
OR
hitachiucosminexus_application_serverMatch06-71-\/f-standard
OR
hitachiucosminexus_application_serverMatch06-71-\/g-enterprise
OR
hitachiucosminexus_application_serverMatch06-71-\/g-standard
OR
hitachiucosminexus_application_serverMatch06-72-enterprise
OR
hitachiucosminexus_application_serverMatch06-72-standard
OR
hitachiucosminexus_application_serverMatch06-72-\/d-enterprise
OR
hitachiucosminexus_application_serverMatch06-72-\/d-standard
OR
hitachiucosminexus_application_serverMatch6.7-enterprise
OR
hitachiucosminexus_application_serverMatch6.7-standard
OR
hitachiucosminexus_application_serverMatch7-enterprise
OR
hitachiucosminexus_application_serverMatch7-standard
OR
hitachiucosminexus_application_serverMatch07-00-enterprise
OR
hitachiucosminexus_application_serverMatch07-00-standard
OR
hitachiucosminexus_application_serverMatch07-10-enterprise
OR
hitachiucosminexus_application_serverMatch07-10-standard
OR
hitachiucosminexus_application_serverMatch07-60-enterprise
OR
hitachiucosminexus_application_serverMatch07-60-standard
OR
hitachiucosminexus_application_serverMatch8-enterprise
OR
hitachiucosminexus_application_serverMatch8-standard
OR
hitachiucosminexus_application_serverMatch08-00-enterprise
OR
hitachiucosminexus_application_serverMatch08-00-standard
OR
hitachiucosminexus_clientMatch06-70
OR
hitachiucosminexus_clientMatch06-70-\/f
OR
hitachiucosminexus_clientMatch06-71
OR
hitachiucosminexus_clientMatch06-71-\/f
OR
hitachiucosminexus_clientMatch07-00
OR
hitachiucosminexus_clientMatch07-60
OR
hitachiucosminexus_clientMatch8
OR
hitachiucosminexus_clientMatch08-00
OR
hitachiucosminexus_collaborationMatch06-20-server
OR
hitachiucosminexus_collaborationMatch06-20-\/d-server
OR
hitachiucosminexus_collaborationMatch06-30-server
OR
hitachiucosminexus_collaborationMatch06-30-\/f-server
OR
hitachiucosminexus_collaborationMatch06-35-server
OR
hitachiucosminexus_collaborationMatch06-35-\/f-server
OR
hitachiucosminexus_developerMatch6-pro
OR
hitachiucosminexus_developerMatch6-standard
OR
hitachiucosminexus_developerMatch06-70-light
OR
hitachiucosminexus_developerMatch06-70-pro
OR
hitachiucosminexus_developerMatch06-70-standard
OR
hitachiucosminexus_developerMatch06-70-\/f-light
OR
hitachiucosminexus_developerMatch06-70-\/f-pro
OR
hitachiucosminexus_developerMatch06-70-\/f-standard
OR
hitachiucosminexus_developerMatch06-71-light
OR
hitachiucosminexus_developerMatch06-71-pro
OR
hitachiucosminexus_developerMatch06-71-standard
OR
hitachiucosminexus_developerMatch06-71-\/f-light
OR
hitachiucosminexus_developerMatch06-71-\/f-pro
OR
hitachiucosminexus_developerMatch06-71-\/f-standard
OR
hitachiucosminexus_developerMatch6.7-light
OR
hitachiucosminexus_developerMatch6.7-pro
OR
hitachiucosminexus_developerMatch6.7-standard
OR
hitachiucosminexus_developerMatch7-light
OR
hitachiucosminexus_developerMatch7-pro
OR
hitachiucosminexus_developerMatch7-standard
OR
hitachiucosminexus_developerMatch07-00-pro
OR
hitachiucosminexus_developerMatch07-00-standard
OR
hitachiucosminexus_developerMatch07-60-pro
OR
hitachiucosminexus_developerMatch07-60-standard
OR
hitachiucosminexus_developerMatch8-light
OR
hitachiucosminexus_developerMatch8-pro
OR
hitachiucosminexus_developerMatch8-standard
OR
hitachiucosminexus_developerMatch08-00-pro
OR
hitachiucosminexus_developerMatch08-00-standard
OR
hitachiucosminexus_operatorMatch6.7
OR
hitachiucosminexus_operatorMatch7
OR
hitachiucosminexus_operatorMatch07-00
OR
hitachiucosminexus_operatorMatch07-60
OR
hitachiucosminexus_operatorMatch8
OR
hitachiucosminexus_service_architectMatch6.7
OR
hitachiucosminexus_service_architectMatch7
OR
hitachiucosminexus_service_architectMatch07-00
OR
hitachiucosminexus_service_architectMatch07-60
OR
hitachiucosminexus_service_architectMatch8
OR
hitachiucosminexus_service_architectMatch08-00
OR
hitachiucosminexus_service_platformMatch6.7
OR
hitachiucosminexus_service_platformMatch7
OR
hitachiucosminexus_service_platformMatch07-00
OR
hitachiucosminexus_service_platformMatch07-10
OR
hitachiucosminexus_service_platformMatch07-60
OR
hitachiucosminexus_service_platformMatch8
OR
hitachiucosminexus_service_platformMatch08-00
Node
hitachiprocessing_kit_for_xmlMatch01-00
OR
hitachiprocessing_kit_for_xmlMatch01-05
OR
hitachiprocessing_kit_for_xmlMatch01-05-\/a
OR
hitachiprocessing_kit_for_xmlMatch01-05-\/b
OR
hitachiprocessing_kit_for_xmlMatch01-05-\/c
OR
hitachiprocessing_kit_for_xmlMatch01-05-\/d
OR
hitachiprocessing_kit_for_xmlMatch01-07
OR
hitachiprocessing_kit_for_xmlMatch01-07-\/a
OR
hitachiprocessing_kit_for_xmlMatch02-00
OR
hitachiprocessing_kit_for_xmlMatch02-00-\/b
OR
hitachiprocessing_kit_for_xmlMatch02-00-\/c
OR
hitachiprocessing_kit_for_xmlMatch02-00-\/d
OR
hitachiprocessing_kit_for_xmlMatch02-05
OR
hitachiprocessing_kit_for_xmlMatch02-05-\/a
OR
hitachiprocessing_kit_for_xmlMatch02-05-\/c
Node
hitachiibm_xl_c\/c\+\+_v7_for_aix_\&_hitachi_developer\'s_kit_for_javaMatch01-00-enterprise
OR
hitachiibm_xl_c\/c\+\+_v8_for_aix_\&_hitachi_developer\'s_kit_for_javaMatch01-00-enterprise
Node
hitachigroupmax_collaborationMatch07-20-server
OR
hitachigroupmax_collaborationMatch07-20-\/d-server
OR
hitachigroupmax_collaborationMatch07-30-server
OR
hitachigroupmax_collaborationMatch07-30-\/f-server
OR
hitachigroupmax_collaborationMatch07-35-server
OR
hitachigroupmax_collaborationMatch07-35-\/f-server
Node
hitachielectronic_form_workflow_setMatch07-50
OR
hitachielectronic_form_workflow_setMatch07-50-\/d
OR
hitachielectronic_form_workflow_setMatch07-60
OR
hitachielectronic_form_workflow_setMatch07-60-\/i
Node
hitachielectronic_form_workflow-standard_setMatch06-70
OR
hitachielectronic_form_workflow-standard_setMatch06-70-\/c
OR
hitachielectronic_form_workflow-standard_setMatch06-70-\/f
OR
hitachielectronic_form_workflow-standard_setMatch07-00
OR
hitachielectronic_form_workflow-standard_setMatch07-00-\/b
OR
hitachielectronic_form_workflow-standard_setMatch07-00-\/c
OR
hitachielectronic_form_workflow-standard_setMatch07-10
OR
hitachielectronic_form_workflow-standard_setMatch07-10-\/a
OR
hitachielectronic_form_workflow-standard_setMatch07-11
OR
hitachielectronic_form_workflow-standard_setMatch07-11-\/c
OR
hitachielectronic_form_workflow-standard_setMatch07-20
OR
hitachielectronic_form_workflow-standard_setMatch07-20-\/b
Node
hitachielectronic_form_workflow-professional_setMatch07-50
OR
hitachielectronic_form_workflow-professional_setMatch07-50-\/d
Node
hitachielectronic_form_workflow-professional_library_setMatch06-70
OR
hitachielectronic_form_workflow-professional_library_setMatch06-70-\/c
OR
hitachielectronic_form_workflow-professional_library_setMatch06-70-\/f
OR
hitachielectronic_form_workflow-professional_library_setMatch07-00
OR
hitachielectronic_form_workflow-professional_library_setMatch07-00-\/b
OR
hitachielectronic_form_workflow-professional_library_setMatch07-00-\/c
OR
hitachielectronic_form_workflow-professional_library_setMatch07-10
OR
hitachielectronic_form_workflow-professional_library_setMatch07-10-\/a
OR
hitachielectronic_form_workflow-professional_library_setMatch07-11
OR
hitachielectronic_form_workflow-professional_library_setMatch07-11-\/c
OR
hitachielectronic_form_workflow-professional_library_setMatch07-20
OR
hitachielectronic_form_workflow-professional_library_setMatch07-20-\/b
Node
hitachielectronic_form_workflow-developer_setMatch07-50
OR
hitachielectronic_form_workflow-developer_setMatch07-50-\/d
OR
hitachielectronic_form_workflow-developer_setMatch07-60
OR
hitachielectronic_form_workflow-developer_setMatch07-60-\/i
Node
hitachielectronic_form_workflow-developer_client_setMatch06-70
OR
hitachielectronic_form_workflow-developer_client_setMatch06-70-\/f
OR
hitachielectronic_form_workflow-developer_client_setMatch07-00
OR
hitachielectronic_form_workflow-developer_client_setMatch07-00-\/c
OR
hitachielectronic_form_workflow-developer_client_setMatch07-10
OR
hitachielectronic_form_workflow-developer_client_setMatch07-10-\/a
OR
hitachielectronic_form_workflow-developer_client_setMatch07-11
OR
hitachielectronic_form_workflow-developer_client_setMatch07-11-\/c
OR
hitachielectronic_form_workflow-developer_client_setMatch07-20
OR
hitachielectronic_form_workflow-developer_client_setMatch07-20-\/b
Node
hitachideveloper\'s_kit_for_java
Node
hitachicosminexus\/opentp1_web_web_front-endsetMatch01-00
OR
hitachicosminexus\/opentp1_web_web_front-endsetMatch01-00-\/b
OR
hitachicosminexus\/opentp1_web_web_front-endsetMatch01-01
OR
hitachicosminexus\/opentp1_web_web_front-endsetMatch01-01-\/c
OR
hitachicosminexus\/opentp1_web_web_front-endsetMatch02-00
OR
hitachicosminexus\/opentp1_web_web_front-endsetMatch02-00-\/a
OR
hitachicosminexus\/opentp1_web_web_front-endsetMatch02-50
OR
hitachicosminexus\/opentp1_web_web_front-endsetMatch02-50-\/a
Node
hitachicosminexus_application_serverMatch5
OR
hitachicosminexus_application_serverMatch05-00
OR
hitachicosminexus_application_serverMatch05-00-\/i
OR
hitachicosminexus_application_serverMatch05-00-\/s
OR
hitachicosminexus_application_serverMatch05-01
OR
hitachicosminexus_application_serverMatch05-01-\/l
OR
hitachicosminexus_application_serverMatch05-02
OR
hitachicosminexus_application_serverMatch05-02-\/e
OR
hitachicosminexus_application_serverMatch05-05
OR
hitachicosminexus_application_serverMatch05-05-\/i
OR
hitachicosminexus_application_serverMatch05-05-\/o
OR
hitachicosminexus_application_serverMatch05-05-\/p
OR
hitachicosminexus_application_serverMatch6
OR
hitachicosminexus_application_serverMatch6-enterprise
OR
hitachicosminexus_application_serverMatch06-00-enterprise
OR
hitachicosminexus_application_serverMatch06-00-standard
OR
hitachicosminexus_application_serverMatch06-00-\/a-enterprise
OR
hitachicosminexus_application_serverMatch06-00-\/a-standard
OR
hitachicosminexus_application_serverMatch06-00-\/b-enterprise
OR
hitachicosminexus_application_serverMatch06-00-\/b-standard
OR
hitachicosminexus_application_serverMatch06-00-\/e-enterprise
OR
hitachicosminexus_application_serverMatch06-00-\/e-standard
OR
hitachicosminexus_application_serverMatch06-00-\/i-enterprise
OR
hitachicosminexus_application_serverMatch06-00-\/i-standard
OR
hitachicosminexus_application_serverMatch06-02-enterprise
OR
hitachicosminexus_application_serverMatch06-02-standard
OR
hitachicosminexus_application_serverMatch06-02-\/d-enterprise
OR
hitachicosminexus_application_serverMatch06-02-\/d-standard
OR
hitachicosminexus_application_serverMatch06-02-\/f-enterprise
OR
hitachicosminexus_application_serverMatch06-02-\/f-standard
OR
hitachicosminexus_application_serverMatch06-02-\/g-enterprise
OR
hitachicosminexus_application_serverMatch06-02-\/g-standard
OR
hitachicosminexus_application_serverMatch06-50-enterprise
OR
hitachicosminexus_application_serverMatch06-50-standard
OR
hitachicosminexus_application_serverMatch06-50-\/b-enterprise
OR
hitachicosminexus_application_serverMatch06-50-\/b-standard
OR
hitachicosminexus_application_serverMatch06-50-\/c-enterprise
OR
hitachicosminexus_application_serverMatch06-50-\/c-standard
OR
hitachicosminexus_application_serverMatch06-50-\/e-enterprise
OR
hitachicosminexus_application_serverMatch06-50-\/e-standard
OR
hitachicosminexus_application_serverMatch06-50-\/f-enterprise
OR
hitachicosminexus_application_serverMatch06-50-\/f-standard
OR
hitachicosminexus_application_serverMatch06-50-\/i-enterprise
OR
hitachicosminexus_application_serverMatch06-50-\/i-standard
OR
hitachicosminexus_application_serverMatch06-51-enterprise
OR
hitachicosminexus_application_serverMatch06-51-standard
OR
hitachicosminexus_application_serverMatch06-51-\/b-enterprise
OR
hitachicosminexus_application_serverMatch06-51-\/b-standard
OR
hitachicosminexus_application_serverMatch06-51-\/e-enterprise
OR
hitachicosminexus_application_serverMatch06-51-\/e-standard
OR
hitachicosminexus_application_serverMatch06-51-\/k-enterprise
OR
hitachicosminexus_application_serverMatch06-51-\/k-standard
Node
hitachicosminexus_clientMatch06-00
OR
hitachicosminexus_clientMatch06-00-\/i
OR
hitachicosminexus_clientMatch06-02
OR
hitachicosminexus_clientMatch06-02-\/g
OR
hitachicosminexus_clientMatch06-50
OR
hitachicosminexus_clientMatch06-50-\/f
OR
hitachicosminexus_clientMatch06-51
OR
hitachicosminexus_clientMatch06-51-\/k
Node
hitachicosminexus_studioMatch04-00-standard
OR
hitachicosminexus_studioMatch04-00-web
OR
hitachicosminexus_studioMatch04-00-\/a-standard
OR
hitachicosminexus_studioMatch04-00-\/a-web
OR
hitachicosminexus_studioMatch04-01-standard
OR
hitachicosminexus_studioMatch04-01-web
OR
hitachicosminexus_studioMatch04-01-\/a-standard
OR
hitachicosminexus_studioMatch04-01-\/a-web
OR
hitachicosminexus_studioMatch05-00
OR
hitachicosminexus_studioMatch05-00-\/i
OR
hitachicosminexus_studioMatch05-01
OR
hitachicosminexus_studioMatch05-01-\/l
OR
hitachicosminexus_studioMatch05-05
OR
hitachicosminexus_studioMatch05-05-\/p
Node
hitachicosminexus_serverMatch04-00-standard
OR
hitachicosminexus_serverMatch04-00-web
OR
hitachicosminexus_serverMatch04-00-\/a-standard
OR
hitachicosminexus_serverMatch04-00-\/a-web
OR
hitachicosminexus_serverMatch04-01-standard
OR
hitachicosminexus_serverMatch04-01-web
OR
hitachicosminexus_serverMatch04-01-\/a-standard
OR
hitachicosminexus_serverMatch04-01-\/a-web
Node
hitachicosminexus_developerMatch5
OR
hitachicosminexus_developerMatch05-00
OR
hitachicosminexus_developerMatch05-00-\/i
OR
hitachicosminexus_developerMatch05-01
OR
hitachicosminexus_developerMatch05-01-\/l
OR
hitachicosminexus_developerMatch05-05
OR
hitachicosminexus_developerMatch05-05-\/p
OR
hitachicosminexus_developerMatch6-light
OR
hitachicosminexus_developerMatch6-pro
OR
hitachicosminexus_developerMatch6-standard
OR
hitachicosminexus_developerMatch06-00-light
OR
hitachicosminexus_developerMatch06-00-pro
OR
hitachicosminexus_developerMatch06-00-standard
OR
hitachicosminexus_developerMatch06-00-\/i-light
OR
hitachicosminexus_developerMatch06-00-\/i-pro
OR
hitachicosminexus_developerMatch06-00-\/i-standard
OR
hitachicosminexus_developerMatch06-02-light
OR
hitachicosminexus_developerMatch06-02-pro
OR
hitachicosminexus_developerMatch06-02-standard
OR
hitachicosminexus_developerMatch06-02-\/g-light
OR
hitachicosminexus_developerMatch06-02-\/g-pro
OR
hitachicosminexus_developerMatch06-02-\/g-standard
OR
hitachicosminexus_developerMatch06-50-light
OR
hitachicosminexus_developerMatch06-50-pro
OR
hitachicosminexus_developerMatch06-50-standard
OR
hitachicosminexus_developerMatch06-50-\/f-light
OR
hitachicosminexus_developerMatch06-50-\/f-pro
OR
hitachicosminexus_developerMatch06-50-\/f-standard
OR
hitachicosminexus_developerMatch06-51-light
OR
hitachicosminexus_developerMatch06-51-pro
OR
hitachicosminexus_developerMatch06-51-standard
OR
hitachicosminexus_developerMatch06-51-\/k-light
OR
hitachicosminexus_developerMatch06-51-\/k-pro
OR
hitachicosminexus_developerMatch06-51-\/k-standard
VendorProductVersionCPE
hitachiucosminexus\/opentp1_web_web_front-endset02-70cpe:2.3:a:hitachi:ucosminexus\/opentp1_web_web_front-endset:02-70:*:*:*:*:*:*:*
hitachiucosminexus\/opentp1_web_web_front-endset02-70-/acpe:2.3:a:hitachi:ucosminexus\/opentp1_web_web_front-endset:02-70-\/a:*:*:*:*:*:*:*
hitachiucosminexus_application_server06-70cpe:2.3:a:hitachi:ucosminexus_application_server:06-70:-:enterprise:*:*:*:*:*
hitachiucosminexus_application_server06-70cpe:2.3:a:hitachi:ucosminexus_application_server:06-70:-:standard:*:*:*:*:*
hitachiucosminexus_application_server06-70-/acpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\/a:-:enterprise:*:*:*:*:*
hitachiucosminexus_application_server06-70-/acpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\/a:-:standard:*:*:*:*:*
hitachiucosminexus_application_server06-70-/ecpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\/e:-:enterprise:*:*:*:*:*
hitachiucosminexus_application_server06-70-/ecpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\/e:-:standard:*:*:*:*:*
hitachiucosminexus_application_server06-70-/fcpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\/f:-:enterprise:*:*:*:*:*
hitachiucosminexus_application_server06-70-/fcpe:2.3:a:hitachi:ucosminexus_application_server:06-70-\/f:-:standard:*:*:*:*:*
Rows per page:
1-10 of 2951

Related

cvelist 2
prion 2
nvd 2
cve 1
cvelist
cvelist
CVE-2009-4776
2010-04-21 14:00:00
CVE-2007-3794
2007-07-15 23:00:00
prion
prion
Buffer overflow
2010-04-21 14:30:00
Buffer overflow
2007-07-15 23:30:00
nvd
nvd
CVE-2009-4776
2010-04-21 14:30:00
CVE-2007-3794
2007-07-15 23:30:00
cve
cve
CVE-2007-3794
2007-07-15 23:30:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7

Confidence

Low

EPSS

0.015

Percentile

87.4%

JSON
Related for CVE-2009-4776
cvelist2prion2nvd2cve1