Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-4776

Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.

Published

2010-04-21T14:30:00.553

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	hitachi	ucosminexus\/opentp1_web_web_front-endset	02-70	Yes
Application	hitachi	ucosminexus\/opentp1_web_web_front-endset	02-70-\/a	Yes
Application	hitachi	ucosminexus_application_server	06-70	Yes
Application	hitachi	ucosminexus_application_server	06-70	Yes
Application	hitachi	ucosminexus_application_server	06-70-\/a	Yes
Application	hitachi	ucosminexus_application_server	06-70-\/a	Yes
Application	hitachi	ucosminexus_application_server	06-70-\/e	Yes
Application	hitachi	ucosminexus_application_server	06-70-\/e	Yes
Application	hitachi	ucosminexus_application_server	06-70-\/f	Yes
Application	hitachi	ucosminexus_application_server	06-70-\/f	Yes
Application	hitachi	ucosminexus_application_server	06-70-\/g	Yes
Application	hitachi	ucosminexus_application_server	06-70-\/g	Yes
Application	hitachi	ucosminexus_application_server	06-70-\/l	Yes
Application	hitachi	ucosminexus_application_server	06-70-\/l	Yes
Application	hitachi	ucosminexus_application_server	06-70-\/n	Yes
Application	hitachi	ucosminexus_application_server	06-70-\/n	Yes
Application	hitachi	ucosminexus_application_server	06-70f	Yes
Application	hitachi	ucosminexus_application_server	06-70f	Yes
Application	hitachi	ucosminexus_application_server	06-71	Yes
Application	hitachi	ucosminexus_application_server	06-71	Yes
Application	hitachi	ucosminexus_application_server	06-71-\/f	Yes
Application	hitachi	ucosminexus_application_server	06-71-\/f	Yes
Application	hitachi	ucosminexus_application_server	06-71-\/g	Yes
Application	hitachi	ucosminexus_application_server	06-71-\/g	Yes
Application	hitachi	ucosminexus_application_server	06-72	Yes
Application	hitachi	ucosminexus_application_server	06-72	Yes
Application	hitachi	ucosminexus_application_server	06-72-\/d	Yes
Application	hitachi	ucosminexus_application_server	06-72-\/d	Yes
Application	hitachi	ucosminexus_application_server	6.7	Yes
Application	hitachi	ucosminexus_application_server	6.7	Yes
Application	hitachi	ucosminexus_application_server	7	Yes
Application	hitachi	ucosminexus_application_server	7	Yes
Application	hitachi	ucosminexus_application_server	07-00	Yes
Application	hitachi	ucosminexus_application_server	07-00	Yes
Application	hitachi	ucosminexus_application_server	07-10	Yes
Application	hitachi	ucosminexus_application_server	07-10	Yes
Application	hitachi	ucosminexus_application_server	07-60	Yes
Application	hitachi	ucosminexus_application_server	07-60	Yes
Application	hitachi	ucosminexus_application_server	8	Yes
Application	hitachi	ucosminexus_application_server	8	Yes
Application	hitachi	ucosminexus_application_server	08-00	Yes
Application	hitachi	ucosminexus_application_server	08-00	Yes
Application	hitachi	ucosminexus_client	06-70	Yes
Application	hitachi	ucosminexus_client	06-70-\/f	Yes
Application	hitachi	ucosminexus_client	06-71	Yes
Application	hitachi	ucosminexus_client	06-71-\/f	Yes
Application	hitachi	ucosminexus_client	07-00	Yes
Application	hitachi	ucosminexus_client	07-60	Yes
Application	hitachi	ucosminexus_client	8	Yes
Application	hitachi	ucosminexus_client	08-00	Yes
Application	hitachi	ucosminexus_collaboration	06-20	Yes
Application	hitachi	ucosminexus_collaboration	06-20-\/d	Yes
Application	hitachi	ucosminexus_collaboration	06-30	Yes
Application	hitachi	ucosminexus_collaboration	06-30-\/f	Yes
Application	hitachi	ucosminexus_collaboration	06-35	Yes
Application	hitachi	ucosminexus_collaboration	06-35-\/f	Yes
Application	hitachi	ucosminexus_developer	6	Yes
Application	hitachi	ucosminexus_developer	6	Yes
Application	hitachi	ucosminexus_developer	06-70	Yes
Application	hitachi	ucosminexus_developer	06-70	Yes
Application	hitachi	ucosminexus_developer	06-70	Yes
Application	hitachi	ucosminexus_developer	06-70-\/f	Yes
Application	hitachi	ucosminexus_developer	06-70-\/f	Yes
Application	hitachi	ucosminexus_developer	06-70-\/f	Yes
Application	hitachi	ucosminexus_developer	06-71	Yes
Application	hitachi	ucosminexus_developer	06-71	Yes
Application	hitachi	ucosminexus_developer	06-71	Yes
Application	hitachi	ucosminexus_developer	06-71-\/f	Yes
Application	hitachi	ucosminexus_developer	06-71-\/f	Yes
Application	hitachi	ucosminexus_developer	06-71-\/f	Yes
Application	hitachi	ucosminexus_developer	6.7	Yes
Application	hitachi	ucosminexus_developer	6.7	Yes
Application	hitachi	ucosminexus_developer	6.7	Yes
Application	hitachi	ucosminexus_developer	7	Yes
Application	hitachi	ucosminexus_developer	7	Yes
Application	hitachi	ucosminexus_developer	7	Yes
Application	hitachi	ucosminexus_developer	07-00	Yes
Application	hitachi	ucosminexus_developer	07-00	Yes
Application	hitachi	ucosminexus_developer	07-60	Yes
Application	hitachi	ucosminexus_developer	07-60	Yes
Application	hitachi	ucosminexus_developer	8	Yes
Application	hitachi	ucosminexus_developer	8	Yes
Application	hitachi	ucosminexus_developer	8	Yes
Application	hitachi	ucosminexus_developer	08-00	Yes
Application	hitachi	ucosminexus_developer	08-00	Yes
Application	hitachi	ucosminexus_operator	6.7	Yes
Application	hitachi	ucosminexus_operator	7	Yes
Application	hitachi	ucosminexus_operator	07-00	Yes
Application	hitachi	ucosminexus_operator	07-60	Yes
Application	hitachi	ucosminexus_operator	8	Yes
Application	hitachi	ucosminexus_service_architect	6.7	Yes
Application	hitachi	ucosminexus_service_architect	7	Yes
Application	hitachi	ucosminexus_service_architect	07-00	Yes
Application	hitachi	ucosminexus_service_architect	07-60	Yes
Application	hitachi	ucosminexus_service_architect	8	Yes
Application	hitachi	ucosminexus_service_architect	08-00	Yes
Application	hitachi	ucosminexus_service_platform	6.7	Yes
Application	hitachi	ucosminexus_service_platform	7	Yes
Application	hitachi	ucosminexus_service_platform	07-00	Yes
Application	hitachi	ucosminexus_service_platform	07-10	Yes
Application	hitachi	ucosminexus_service_platform	07-60	Yes
Application	hitachi	ucosminexus_service_platform	8	Yes
Application	hitachi	ucosminexus_service_platform	08-00	Yes
Application	hitachi	processing_kit_for_xml	01-00	Yes
Application	hitachi	processing_kit_for_xml	01-05	Yes
Application	hitachi	processing_kit_for_xml	01-05-\/a	Yes
Application	hitachi	processing_kit_for_xml	01-05-\/b	Yes
Application	hitachi	processing_kit_for_xml	01-05-\/c	Yes
Application	hitachi	processing_kit_for_xml	01-05-\/d	Yes
Application	hitachi	processing_kit_for_xml	01-07	Yes
Application	hitachi	processing_kit_for_xml	01-07-\/a	Yes
Application	hitachi	processing_kit_for_xml	02-00	Yes
Application	hitachi	processing_kit_for_xml	02-00-\/b	Yes
Application	hitachi	processing_kit_for_xml	02-00-\/c	Yes
Application	hitachi	processing_kit_for_xml	02-00-\/d	Yes
Application	hitachi	processing_kit_for_xml	02-05	Yes
Application	hitachi	processing_kit_for_xml	02-05-\/a	Yes
Application	hitachi	processing_kit_for_xml	02-05-\/c	Yes
Application	hitachi	ibm_xl_c\/c\+\+_v7_for_aix_\&_hitachi_developer\'s_kit_for_java	01-00	Yes
Application	hitachi	ibm_xl_c\/c\+\+_v8_for_aix_\&_hitachi_developer\'s_kit_for_java	01-00	Yes
Application	hitachi	groupmax_collaboration	07-20	Yes
Application	hitachi	groupmax_collaboration	07-20-\/d	Yes
Application	hitachi	groupmax_collaboration	07-30	Yes
Application	hitachi	groupmax_collaboration	07-30-\/f	Yes
Application	hitachi	groupmax_collaboration	07-35	Yes
Application	hitachi	groupmax_collaboration	07-35-\/f	Yes
Application	hitachi	electronic_form_workflow_set	07-50	Yes
Application	hitachi	electronic_form_workflow_set	07-50-\/d	Yes
Application	hitachi	electronic_form_workflow_set	07-60	Yes
Application	hitachi	electronic_form_workflow_set	07-60-\/i	Yes
Application	hitachi	electronic_form_workflow-standard_set	06-70	Yes
Application	hitachi	electronic_form_workflow-standard_set	06-70-\/c	Yes
Application	hitachi	electronic_form_workflow-standard_set	06-70-\/f	Yes
Application	hitachi	electronic_form_workflow-standard_set	07-00	Yes
Application	hitachi	electronic_form_workflow-standard_set	07-00-\/b	Yes
Application	hitachi	electronic_form_workflow-standard_set	07-00-\/c	Yes
Application	hitachi	electronic_form_workflow-standard_set	07-10	Yes
Application	hitachi	electronic_form_workflow-standard_set	07-10-\/a	Yes
Application	hitachi	electronic_form_workflow-standard_set	07-11	Yes
Application	hitachi	electronic_form_workflow-standard_set	07-11-\/c	Yes
Application	hitachi	electronic_form_workflow-standard_set	07-20	Yes
Application	hitachi	electronic_form_workflow-standard_set	07-20-\/b	Yes
Application	hitachi	electronic_form_workflow-professional_set	07-50	Yes
Application	hitachi	electronic_form_workflow-professional_set	07-50-\/d	Yes
Application	hitachi	electronic_form_workflow-professional_library_set	06-70	Yes
Application	hitachi	electronic_form_workflow-professional_library_set	06-70-\/c	Yes
Application	hitachi	electronic_form_workflow-professional_library_set	06-70-\/f	Yes
Application	hitachi	electronic_form_workflow-professional_library_set	07-00	Yes
Application	hitachi	electronic_form_workflow-professional_library_set	07-00-\/b	Yes
Application	hitachi	electronic_form_workflow-professional_library_set	07-00-\/c	Yes
Application	hitachi	electronic_form_workflow-professional_library_set	07-10	Yes
Application	hitachi	electronic_form_workflow-professional_library_set	07-10-\/a	Yes
Application	hitachi	electronic_form_workflow-professional_library_set	07-11	Yes
Application	hitachi	electronic_form_workflow-professional_library_set	07-11-\/c	Yes
Application	hitachi	electronic_form_workflow-professional_library_set	07-20	Yes
Application	hitachi	electronic_form_workflow-professional_library_set	07-20-\/b	Yes
Application	hitachi	electronic_form_workflow-developer_set	07-50	Yes
Application	hitachi	electronic_form_workflow-developer_set	07-50-\/d	Yes
Application	hitachi	electronic_form_workflow-developer_set	07-60	Yes
Application	hitachi	electronic_form_workflow-developer_set	07-60-\/i	Yes
Application	hitachi	electronic_form_workflow-developer_client_set	06-70	Yes
Application	hitachi	electronic_form_workflow-developer_client_set	06-70-\/f	Yes
Application	hitachi	electronic_form_workflow-developer_client_set	07-00	Yes
Application	hitachi	electronic_form_workflow-developer_client_set	07-00-\/c	Yes
Application	hitachi	electronic_form_workflow-developer_client_set	07-10	Yes
Application	hitachi	electronic_form_workflow-developer_client_set	07-10-\/a	Yes
Application	hitachi	electronic_form_workflow-developer_client_set	07-11	Yes
Application	hitachi	electronic_form_workflow-developer_client_set	07-11-\/c	Yes
Application	hitachi	electronic_form_workflow-developer_client_set	07-20	Yes
Application	hitachi	electronic_form_workflow-developer_client_set	07-20-\/b	Yes
Application	hitachi	developer\'s_kit_for_java	*	Yes
Application	hitachi	cosminexus\/opentp1_web_web_front-endset	01-00	Yes
Application	hitachi	cosminexus\/opentp1_web_web_front-endset	01-00-\/b	Yes
Application	hitachi	cosminexus\/opentp1_web_web_front-endset	01-01	Yes
Application	hitachi	cosminexus\/opentp1_web_web_front-endset	01-01-\/c	Yes
Application	hitachi	cosminexus\/opentp1_web_web_front-endset	02-00	Yes
Application	hitachi	cosminexus\/opentp1_web_web_front-endset	02-00-\/a	Yes
Application	hitachi	cosminexus\/opentp1_web_web_front-endset	02-50	Yes
Application	hitachi	cosminexus\/opentp1_web_web_front-endset	02-50-\/a	Yes
Application	hitachi	cosminexus_application_server	5	Yes
Application	hitachi	cosminexus_application_server	05-00	Yes
Application	hitachi	cosminexus_application_server	05-00-\/i	Yes
Application	hitachi	cosminexus_application_server	05-00-\/s	Yes
Application	hitachi	cosminexus_application_server	05-01	Yes
Application	hitachi	cosminexus_application_server	05-01-\/l	Yes
Application	hitachi	cosminexus_application_server	05-02	Yes
Application	hitachi	cosminexus_application_server	05-02-\/e	Yes
Application	hitachi	cosminexus_application_server	05-05	Yes
Application	hitachi	cosminexus_application_server	05-05-\/i	Yes
Application	hitachi	cosminexus_application_server	05-05-\/o	Yes
Application	hitachi	cosminexus_application_server	05-05-\/p	Yes
Application	hitachi	cosminexus_application_server	6	Yes
Application	hitachi	cosminexus_application_server	6	Yes
Application	hitachi	cosminexus_application_server	06-00	Yes
Application	hitachi	cosminexus_application_server	06-00	Yes
Application	hitachi	cosminexus_application_server	06-00-\/a	Yes
Application	hitachi	cosminexus_application_server	06-00-\/a	Yes
Application	hitachi	cosminexus_application_server	06-00-\/b	Yes
Application	hitachi	cosminexus_application_server	06-00-\/b	Yes
Application	hitachi	cosminexus_application_server	06-00-\/e	Yes
Application	hitachi	cosminexus_application_server	06-00-\/e	Yes
Application	hitachi	cosminexus_application_server	06-00-\/i	Yes
Application	hitachi	cosminexus_application_server	06-00-\/i	Yes
Application	hitachi	cosminexus_application_server	06-02	Yes
Application	hitachi	cosminexus_application_server	06-02	Yes
Application	hitachi	cosminexus_application_server	06-02-\/d	Yes
Application	hitachi	cosminexus_application_server	06-02-\/d	Yes
Application	hitachi	cosminexus_application_server	06-02-\/f	Yes
Application	hitachi	cosminexus_application_server	06-02-\/f	Yes
Application	hitachi	cosminexus_application_server	06-02-\/g	Yes
Application	hitachi	cosminexus_application_server	06-02-\/g	Yes
Application	hitachi	cosminexus_application_server	06-50	Yes
Application	hitachi	cosminexus_application_server	06-50	Yes
Application	hitachi	cosminexus_application_server	06-50-\/b	Yes
Application	hitachi	cosminexus_application_server	06-50-\/b	Yes
Application	hitachi	cosminexus_application_server	06-50-\/c	Yes
Application	hitachi	cosminexus_application_server	06-50-\/c	Yes
Application	hitachi	cosminexus_application_server	06-50-\/e	Yes
Application	hitachi	cosminexus_application_server	06-50-\/e	Yes
Application	hitachi	cosminexus_application_server	06-50-\/f	Yes
Application	hitachi	cosminexus_application_server	06-50-\/f	Yes
Application	hitachi	cosminexus_application_server	06-50-\/i	Yes
Application	hitachi	cosminexus_application_server	06-50-\/i	Yes
Application	hitachi	cosminexus_application_server	06-51	Yes
Application	hitachi	cosminexus_application_server	06-51	Yes
Application	hitachi	cosminexus_application_server	06-51-\/b	Yes
Application	hitachi	cosminexus_application_server	06-51-\/b	Yes
Application	hitachi	cosminexus_application_server	06-51-\/e	Yes
Application	hitachi	cosminexus_application_server	06-51-\/e	Yes
Application	hitachi	cosminexus_application_server	06-51-\/k	Yes
Application	hitachi	cosminexus_application_server	06-51-\/k	Yes
Application	hitachi	cosminexus_client	06-00	Yes
Application	hitachi	cosminexus_client	06-00-\/i	Yes
Application	hitachi	cosminexus_client	06-02	Yes
Application	hitachi	cosminexus_client	06-02-\/g	Yes
Application	hitachi	cosminexus_client	06-50	Yes
Application	hitachi	cosminexus_client	06-50-\/f	Yes
Application	hitachi	cosminexus_client	06-51	Yes
Application	hitachi	cosminexus_client	06-51-\/k	Yes
Application	hitachi	cosminexus_studio	04-00	Yes
Application	hitachi	cosminexus_studio	04-00	Yes
Application	hitachi	cosminexus_studio	04-00-\/a	Yes
Application	hitachi	cosminexus_studio	04-00-\/a	Yes
Application	hitachi	cosminexus_studio	04-01	Yes
Application	hitachi	cosminexus_studio	04-01	Yes
Application	hitachi	cosminexus_studio	04-01-\/a	Yes
Application	hitachi	cosminexus_studio	04-01-\/a	Yes
Application	hitachi	cosminexus_studio	05-00	Yes
Application	hitachi	cosminexus_studio	05-00-\/i	Yes
Application	hitachi	cosminexus_studio	05-01	Yes
Application	hitachi	cosminexus_studio	05-01-\/l	Yes
Application	hitachi	cosminexus_studio	05-05	Yes
Application	hitachi	cosminexus_studio	05-05-\/p	Yes
Application	hitachi	cosminexus_server	04-00	Yes
Application	hitachi	cosminexus_server	04-00	Yes
Application	hitachi	cosminexus_server	04-00-\/a	Yes
Application	hitachi	cosminexus_server	04-00-\/a	Yes
Application	hitachi	cosminexus_server	04-01	Yes
Application	hitachi	cosminexus_server	04-01	Yes
Application	hitachi	cosminexus_server	04-01-\/a	Yes
Application	hitachi	cosminexus_server	04-01-\/a	Yes
Application	hitachi	cosminexus_developer	5	Yes
Application	hitachi	cosminexus_developer	05-00	Yes
Application	hitachi	cosminexus_developer	05-00-\/i	Yes
Application	hitachi	cosminexus_developer	05-01	Yes
Application	hitachi	cosminexus_developer	05-01-\/l	Yes
Application	hitachi	cosminexus_developer	05-05	Yes
Application	hitachi	cosminexus_developer	05-05-\/p	Yes
Application	hitachi	cosminexus_developer	6	Yes
Application	hitachi	cosminexus_developer	6	Yes
Application	hitachi	cosminexus_developer	6	Yes
Application	hitachi	cosminexus_developer	06-00	Yes
Application	hitachi	cosminexus_developer	06-00	Yes
Application	hitachi	cosminexus_developer	06-00	Yes
Application	hitachi	cosminexus_developer	06-00-\/i	Yes
Application	hitachi	cosminexus_developer	06-00-\/i	Yes
Application	hitachi	cosminexus_developer	06-00-\/i	Yes
Application	hitachi	cosminexus_developer	06-02	Yes
Application	hitachi	cosminexus_developer	06-02	Yes
Application	hitachi	cosminexus_developer	06-02	Yes
Application	hitachi	cosminexus_developer	06-02-\/g	Yes
Application	hitachi	cosminexus_developer	06-02-\/g	Yes
Application	hitachi	cosminexus_developer	06-02-\/g	Yes
Application	hitachi	cosminexus_developer	06-50	Yes
Application	hitachi	cosminexus_developer	06-50	Yes
Application	hitachi	cosminexus_developer	06-50	Yes
Application	hitachi	cosminexus_developer	06-50-\/f	Yes
Application	hitachi	cosminexus_developer	06-50-\/f	Yes
Application	hitachi	cosminexus_developer	06-50-\/f	Yes
Application	hitachi	cosminexus_developer	06-51	Yes
Application	hitachi	cosminexus_developer	06-51	Yes
Application	hitachi	cosminexus_developer	06-51	Yes
Application	hitachi	cosminexus_developer	06-51-\/k	Yes
Application	hitachi	cosminexus_developer	06-51-\/k	Yes
Application	hitachi	cosminexus_developer	06-51-\/k	Yes

References

http://osvdb.org/57834 ([email protected])
http://secunia.com/advisories/36622 Vendor Advisory ([email protected])
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html ([email protected])
http://www.securityfocus.com/bid/36309 ([email protected])
http://www.vupen.com/english/advisories/2009/2574 Vendor Advisory ([email protected])
http://osvdb.org/57834 (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/36622 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/36309 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2009/2574 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)