CVE-2007-0243
Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and...
6.8 MediumPublic exploitFix available
Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.
Exploit likelihood
11.6%Down 3.6 points since Feb 4, 2022
What each source reports
NVD Score used
Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.
- Record
CVE-2007-0243- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.
- Record
CVE-2007-0243- Updated
- 2026-11-02
EUVDEUVD-2007-0245 No score
Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.
- Record
EUVD-2007-0245- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qj96-m693-9g56 No score
Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and...
Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.
- Record
GHSA-qj96-m693-9g56- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
IBMJava2-JRERed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 1:1.3.1-12 | 1:1.3.1-12 |
IBMJava2-SDKRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 1:1.3.1-11 | 1:1.3.1-11 |
IBMJava2-JRERed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 1:1.3.1-12 | 1:1.3.1-12 |
IBMJava2-SDKRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 1:1.3.1-11 | 1:1.3.1-11 |
IBMJava2-JRERed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 1:1.3.1-12 | 1:1.3.1-12 |
IBMJava2-SDKRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 1:1.3.1-11 | 1:1.3.1-11 |
java-1.4.2-ibmRed Hat:rhel_extras:3 |
before 0:1.4.2.8-1jpp.1.el3 | 0:1.4.2.8-1jpp.1.el3 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:3 |
before 0:1.4.2.8-1jpp.1.el3 | 0:1.4.2.8-1jpp.1.el3 |
java-1.4.2-ibm-develRed Hat:rhel_extras:3 |
before 0:1.4.2.8-1jpp.1.el3 | 0:1.4.2.8-1jpp.1.el3 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:3 |
before 0:1.4.2.8-1jpp.1.el3 | 0:1.4.2.8-1jpp.1.el3 |
Show 86 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.4.2-ibm-pluginRed Hat:rhel_extras:3 |
before 0:1.4.2.8-1jpp.1.el3 | 0:1.4.2.8-1jpp.1.el3 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:3 |
before 0:1.4.2.8-1jpp.1.el3 | 0:1.4.2.8-1jpp.1.el3 |
java-1.4.2-ibmRed Hat:rhel_extras:4 |
before 0:1.4.2.8-1jpp.1.el4 | 0:1.4.2.8-1jpp.1.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 |
before 0:1.4.2.8-1jpp.1.el4 | 0:1.4.2.8-1jpp.1.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 |
before 0:1.4.2.8-1jpp.1.el4 | 0:1.4.2.8-1jpp.1.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 |
before 0:1.4.2.8-1jpp.1.el4 | 0:1.4.2.8-1jpp.1.el4 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 |
before 0:1.4.2.8-1jpp.1.el4 | 0:1.4.2.8-1jpp.1.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 |
before 0:1.4.2.8-1jpp.1.el4 | 0:1.4.2.8-1jpp.1.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 |
before 0:1.4.2.8-1jpp.1.el4 | 0:1.4.2.8-1jpp.1.el4 |
java-1.4.2-ibmRed Hat:rhel_extras:5::client |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::client |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::client |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::client |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::client |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::client |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::client |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:5::server |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::server |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::server |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::server |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::server |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::server |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::server |
before 0:1.4.2.8-1jpp.1.el5 | 0:1.4.2.8-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:4 |
before 1:1.5.0.4-1jpp.3.el4 | 1:1.5.0.4-1jpp.3.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.5.0.4-1jpp.3.el4 | 1:1.5.0.4-1jpp.3.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.5.0.4-1jpp.3.el4 | 1:1.5.0.4-1jpp.3.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.5.0.4-1jpp.3.el4 | 1:1.5.0.4-1jpp.3.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.5.0.4-1jpp.3.el4 | 1:1.5.0.4-1jpp.3.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.5.0.4-1jpp.3.el4 | 1:1.5.0.4-1jpp.3.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.5.0.4-1jpp.3.el4 | 1:1.5.0.4-1jpp.3.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.5.0.4-1jpp.3.el5 | 1:1.5.0.4-1jpp.3.el5 |
java-1.5.0-beaRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-demoRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-develRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-jdbcRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-missioncontrolRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-srcRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
jabberdRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.0s10-3.37.rhn | 0:2.0s10-3.37.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
jfreechartRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.24-1.el3 | 0:2.24-1.el3 |
rhn-apacheRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel3 | 0:1.3.27-36.rhn.rhel3 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel3 | 0:1.2.23-2rhn.rhel3 |
rhn-modperlRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel3 | 0:1.29-16.rhel3 |
rhn-modsslRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel3 | 0:2.8.12-8.rhn.10.rhel3 |
tomcat5Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Sun Microsystems Java - '.GIF' File Parsing Memory Corruption | 2007-01-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0243 is a medium vulnerability (CVSS 6.8) in Sun Jdk, published January 17, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.6%, the 96th percentile. Fixed in java-1.4.2-ibm 0:1.4.2.8-1jpp.1.el3.
References
securityfocus.com/archive/1/457159/100/0/threaded
sunsolve.sun.com/search/document.do?assetkey=1-26-102760-1
docs.info.apple.com/article.html?artnum=307177
secunia.com/advisories/24468
redhat.com/support/errata/RHSA-2007-0166.html
kb.cert.org/vuls/id/388289
Show 194 moreShow less
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579
vupen.com/english/advisories/2007/1814
osvdb.org/32834
novell.com/linux/security/advisories/2007_45_java.html
lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
securityreason.com/securityalert/2158
securitytracker.com/id?1017520
support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11073
zerodayinitiative.com/advisories/ZDI-07-005.html
exchange.xforce.ibmcloud.com/vulnerabilities/31537
security.gentoo.org/glsa/glsa-200702-08.xml
gentoo.org/security/en/glsa/glsa-200702-07.xml
us-cert.gov/cas/techalerts/TA07-022A.html
dev2dev.bea.com/pub/advisory/242
nvd.nist.gov/vuln/detail/CVE-2007-0243
github.com/advisories/GHSA-qj96-m693-9g56
access.redhat.com/errata/RHSA-2007:0072
www-128.ibm.com/developerworks/java/jdk/alerts
bugzilla.redhat.com/show_bug.cgi?id=226996
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0072.json
cve.org/CVERecord?id=CVE-2006-6731
This page doesn't list everything
Left out here: 44 references. The JSON record has them.