Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2007-2789 Details

Description

The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://dev2dev.bea.com/pub/advisory/248	CVE	Third Party Advisory
http://docs.info.apple.com/article.html?artnum=307177	CVE	Broken Link
http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html	CVE	Mailing ListThird Party Advisory
http://scary.beasts.org/security/CESA-2006-004.html	CVE	Third Party Advisory
http://secunia.com/advisories/25295	CVE	PatchThird Party Advisory
http://secunia.com/advisories/25474	CVE	Third Party Advisory
http://secunia.com/advisories/25832	CVE	Third Party Advisory
http://secunia.com/advisories/26049	CVE	Third Party Advisory
http://secunia.com/advisories/26119	CVE	Third Party Advisory
http://secunia.com/advisories/26311	CVE	Third Party Advisory
http://secunia.com/advisories/26369	CVE	Third Party Advisory
http://secunia.com/advisories/26631	CVE	Third Party Advisory
http://secunia.com/advisories/26645	CVE	Third Party Advisory
http://secunia.com/advisories/26933	CVE	Third Party Advisory
http://secunia.com/advisories/27203	CVE	Third Party Advisory
http://secunia.com/advisories/27266	CVE	Third Party Advisory
http://secunia.com/advisories/28056	CVE	Third Party Advisory
http://secunia.com/advisories/28115	CVE	Third Party Advisory
http://secunia.com/advisories/29340	CVE	Third Party Advisory
http://secunia.com/advisories/29858	CVE	Third Party Advisory
http://secunia.com/advisories/30780	CVE	Third Party Advisory
http://secunia.com/advisories/30805	CVE	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200706-08.xml	CVE	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200804-28.xml	CVE	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34320	CVE	Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34654	CVE	Third Party AdvisoryVDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10800	CVE	Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102934-1	CVE	Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200856-1	CVE	Broken Link
http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html	CVE	Third Party Advisory
http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html	CVE	Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-December/001862.html	CVE	Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-July/001696.html	CVE	Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-July/001697.html	CVE	Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-July/001708.html	CVE	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200705-23.xml	CVE	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml	CVE	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml	CVE	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml	CVE	Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_45_java.html	CVE	Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_56_ibmjava.html	CVE	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0817.html	CVE	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0829.html	CVE	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0956.html	CVE	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-1086.html	CVE	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0100.html	CVE	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0133.html	CVE	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0261.html	CVE	Third Party Advisory
http://www.securityfocus.com/bid/24004	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1018182	CVE	Third Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2007/1836	CVE	Permissions Required
http://www.vupen.com/english/advisories/2007/3009	CVE	Permissions Required
http://www.vupen.com/english/advisories/2007/4224	CVE	Permissions Required
http://dev2dev.bea.com/pub/advisory/248	[email protected]	Third Party Advisory
http://docs.info.apple.com/article.html?artnum=307177	[email protected]	Broken Link
http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html	[email protected]	Mailing ListThird Party Advisory
http://scary.beasts.org/security/CESA-2006-004.html	[email protected]	Third Party Advisory
http://secunia.com/advisories/25295	[email protected]	PatchThird Party Advisory
http://secunia.com/advisories/25474	[email protected]	Third Party Advisory
http://secunia.com/advisories/25832	[email protected]	Third Party Advisory
http://secunia.com/advisories/26049	[email protected]	Third Party Advisory
http://secunia.com/advisories/26119	[email protected]	Third Party Advisory
http://secunia.com/advisories/26311	[email protected]	Third Party Advisory
http://secunia.com/advisories/26369	[email protected]	Third Party Advisory
http://secunia.com/advisories/26631	[email protected]	Third Party Advisory
http://secunia.com/advisories/26645	[email protected]	Third Party Advisory
http://secunia.com/advisories/26933	[email protected]	Third Party Advisory
http://secunia.com/advisories/27203	[email protected]	Third Party Advisory
http://secunia.com/advisories/27266	[email protected]	Third Party Advisory
http://secunia.com/advisories/28056	[email protected]	Third Party Advisory
http://secunia.com/advisories/28115	[email protected]	Third Party Advisory
http://secunia.com/advisories/29340	[email protected]	Third Party Advisory
http://secunia.com/advisories/29858	[email protected]	Third Party Advisory
http://secunia.com/advisories/30780	[email protected]	Third Party Advisory
http://secunia.com/advisories/30805	[email protected]	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200706-08.xml	[email protected]	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200804-28.xml	[email protected]	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34320	[email protected]	Third Party AdvisoryVDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34654	[email protected]	Third Party AdvisoryVDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10800	[email protected]	Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102934-1	[email protected]	Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200856-1	[email protected]	Broken Link
http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html	[email protected]	Third Party Advisory
http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html	[email protected]	Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-December/001862.html	[email protected]	Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-July/001696.html	[email protected]	Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-July/001697.html	[email protected]	Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-July/001708.html	[email protected]	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200705-23.xml	[email protected]	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml	[email protected]	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml	[email protected]	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml	[email protected]	Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_45_java.html	[email protected]	Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_56_ibmjava.html	[email protected]	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0817.html	[email protected]	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0829.html	[email protected]	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0956.html	[email protected]	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-1086.html	[email protected]	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0100.html	[email protected]	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0133.html	[email protected]	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0261.html	[email protected]	Third Party Advisory
http://www.securityfocus.com/bid/24004	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1018182	[email protected]	Third Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2007/1836	[email protected]	Permissions Required
http://www.vupen.com/english/advisories/2007/3009	[email protected]	Permissions Required
http://www.vupen.com/english/advisories/2007/4224	[email protected]	Permissions Required

see all 106 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-399	Resource Management Errors	[email protected]

Affected Products

Product	Versions
sun jdk	1.5.0 - 1.5.0 update1 1.5.0 update10 1.5.0 update2 1.5.0 update3
CPE cpe:2.3:a:sun:jdk:1.5.0:-:::::: cpe:2.3:a:sun:jdk:1.5.0:update1:::::: cpe:2.3:a:sun:jdk:1.5.0:update10:::::: cpe:2.3:a:sun:jdk:1.5.0:update2:::::: cpe:2.3:a:sun:jdk:1.5.0:update3:::::: cpe:2.3:a:sun:jdk:1.5.0:update4:::::: cpe:2.3:a:sun:jdk:1.5.0:update5:::::: cpe:2.3:a:sun:jdk:1.5.0:update6:::::: cpe:2.3:a:sun:jdk:1.5.0:update7:::::: cpe:2.3:a:sun:jdk:1.5.0:update8:::::: cpe:2.3:a:sun:jdk:1.5.0:update9:::::: cpe:2.3:a:sun:jdk:1.6.0:-:::::: Remediation No remediation found in references.
sun jre	1.3.1 - 1.3.1_2 1.3.1_03 1.3.1_04 1.3.1_05
CPE cpe:2.3:a:sun:jre:1.3.1:-:::::: cpe:2.3:a:sun:jre:1.3.1_2:::::::* cpe:2.3:a:sun:jre:1.3.1_03:::::::* cpe:2.3:a:sun:jre:1.3.1_04:::::::* cpe:2.3:a:sun:jre:1.3.1_05:::::::* cpe:2.3:a:sun:jre:1.3.1_06:::::::* cpe:2.3:a:sun:jre:1.3.1_07:::::::* cpe:2.3:a:sun:jre:1.3.1_08:::::::* cpe:2.3:a:sun:jre:1.3.1_09:::::::* cpe:2.3:a:sun:jre:1.3.1_10:::::::* cpe:2.3:a:sun:jre:1.3.1_11:::::::* cpe:2.3:a:sun:jre:1.3.1_12:::::::* cpe:2.3:a:sun:jre:1.3.1_13:::::::* cpe:2.3:a:sun:jre:1.3.1_14:::::::* cpe:2.3:a:sun:jre:1.3.1_15:::::::* cpe:2.3:a:sun:jre:1.3.1_16:::::::* cpe:2.3:a:sun:jre:1.3.1_17:::::::* cpe:2.3:a:sun:jre:1.3.1_18:::::::* cpe:2.3:a:sun:jre:1.3.1_19:::::::* cpe:2.3:a:sun:jre:1.4.2:-:::::: cpe:2.3:a:sun:jre:1.4.2_1:::::::* cpe:2.3:a:sun:jre:1.4.2_2:::::::* cpe:2.3:a:sun:jre:1.4.2_3:::::::* cpe:2.3:a:sun:jre:1.4.2_4:::::::* cpe:2.3:a:sun:jre:1.4.2_5:::::::* cpe:2.3:a:sun:jre:1.4.2_6:::::::* cpe:2.3:a:sun:jre:1.4.2_7:::::::* cpe:2.3:a:sun:jre:1.4.2_8:::::::* cpe:2.3:a:sun:jre:1.4.2_9:::::::* cpe:2.3:a:sun:jre:1.4.2_10:::::::* cpe:2.3:a:sun:jre:1.4.2_11:::::::* cpe:2.3:a:sun:jre:1.4.2_12:::::::* cpe:2.3:a:sun:jre:1.4.2_13:::::::* cpe:2.3:a:sun:jre:1.4.2_14:::::::* cpe:2.3:a:sun:jre:1.5.0:-:::::: cpe:2.3:a:sun:jre:1.5.0:update1:::::: cpe:2.3:a:sun:jre:1.5.0:update10:::::: cpe:2.3:a:sun:jre:1.5.0:update2:::::: cpe:2.3:a:sun:jre:1.5.0:update3:::::: cpe:2.3:a:sun:jre:1.5.0:update4:::::: cpe:2.3:a:sun:jre:1.5.0:update5:::::: cpe:2.3:a:sun:jre:1.5.0:update6:::::: cpe:2.3:a:sun:jre:1.5.0:update7:::::: cpe:2.3:a:sun:jre:1.5.0:update8:::::: cpe:2.3:a:sun:jre:1.5.0:update9:::::: cpe:2.3:a:sun:jre:1.6.0:-:::::: Remediation No remediation found in references.
sun sdk	1.3.1 1.3.1_01 1.3.1_01a 1.3.1_02 1.3.1_03
CPE cpe:2.3:a:sun:sdk:1.3.1:::::::* cpe:2.3:a:sun:sdk:1.3.1_01:::::::* cpe:2.3:a:sun:sdk:1.3.1_01a:::::::* cpe:2.3:a:sun:sdk:1.3.1_02:::::::* cpe:2.3:a:sun:sdk:1.3.1_03:::::::* cpe:2.3:a:sun:sdk:1.3.1_04:::::::* cpe:2.3:a:sun:sdk:1.3.1_05:::::::* cpe:2.3:a:sun:sdk:1.3.1_06:::::::* cpe:2.3:a:sun:sdk:1.3.1_07:::::::* cpe:2.3:a:sun:sdk:1.3.1_08:::::::* cpe:2.3:a:sun:sdk:1.3.1_09:::::::* cpe:2.3:a:sun:sdk:1.3.1_10:::::::* cpe:2.3:a:sun:sdk:1.3.1_11:::::::* cpe:2.3:a:sun:sdk:1.3.1_12:::::::* cpe:2.3:a:sun:sdk:1.3.1_13:::::::* cpe:2.3:a:sun:sdk:1.3.1_14:::::::* cpe:2.3:a:sun:sdk:1.3.1_15:::::::* cpe:2.3:a:sun:sdk:1.3.1_16:::::::* cpe:2.3:a:sun:sdk:1.3.1_17:::::::* cpe:2.3:a:sun:sdk:1.3.1_18:::::::* cpe:2.3:a:sun:sdk:1.3.1_19:::::::* cpe:2.3:a:sun:sdk:1.4.2:::::::* cpe:2.3:a:sun:sdk:1.4.2_1:::::::* cpe:2.3:a:sun:sdk:1.4.2_2:::::::* cpe:2.3:a:sun:sdk:1.4.2_3:::::::* cpe:2.3:a:sun:sdk:1.4.2_4:::::::* cpe:2.3:a:sun:sdk:1.4.2_5:::::::* cpe:2.3:a:sun:sdk:1.4.2_6:::::::* cpe:2.3:a:sun:sdk:1.4.2_7:::::::* cpe:2.3:a:sun:sdk:1.4.2_8:::::::* cpe:2.3:a:sun:sdk:1.4.2_9:::::::* cpe:2.3:a:sun:sdk:1.4.2_10:::::::* cpe:2.3:a:sun:sdk:1.4.2_11:::::::* cpe:2.3:a:sun:sdk:1.4.2_12:::::::* cpe:2.3:a:sun:sdk:1.4.2_13:::::::* cpe:2.3:a:sun:sdk:1.4.2_14:::::::* Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Aug 1, 2019	Modified Analysis	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 29, 2017	CVE Modified	[email protected]
May 22, 2007	Initial Analysis	[email protected]

CVE-2007-2789 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO