NetSight
critical9.3

CVE-2009-4776

Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic …

Impact

Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.

Affected products

VendorProductAffected versions
HitachiUcosminexus\/Opentp1 Web Web Front-Endset
Versions 02-70, 02-70-\/a
HitachiUcosminexus Application Server
Versions 06-70, 06-70-\/a, 06-70-\/e, 06-70-\/f, 06-70-\/g, 06-70-\/l
HitachiUcosminexus Client
Versions 06-70, 06-70-\/f, 06-71, 06-71-\/f, 07-00, 07-60
HitachiUcosminexus Collaboration
Versions 06-20, 06-20-\/d, 06-30, 06-30-\/f, 06-35, 06-35-\/f
HitachiUcosminexus Developer
Versions 6, 06-70, 06-70-\/f, 06-71, 06-71-\/f, 6.7
HitachiUcosminexus Operator
Versions 6.7, 7, 07-00, 07-60, 8
HitachiUcosminexus Service Architect
Versions 6.7, 7, 07-00, 07-60, 8, 08-00
HitachiUcosminexus Service Platform
Versions 6.7, 7, 07-00, 07-10, 07-60, 8
HitachiProcessing Kit For Xml
Versions 01-00, 01-05, 01-05-\/a, 01-05-\/b, 01-05-\/c, 01-05-\/d
HitachiIbm Xl C\/C\+\+ V7 For Aix \& Hitachi Developer\'S Kit For Java
Version 01-00
HitachiIbm Xl C\/C\+\+ V8 For Aix \& Hitachi Developer\'S Kit For Java
Version 01-00
HitachiGroupmax Collaboration
Versions 07-20, 07-20-\/d, 07-30, 07-30-\/f, 07-35, 07-35-\/f

Weakness classification

References