CVE-2007-2439
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote...
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service (device hang) and read data from a COM or LPT device via a DOS device name with an arbitrary extension.
Exploit likelihood
What each source reports
NVD Score used
9.4
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service (device hang) and read data from a COM or LPT device via a DOS device name with an arbitrary extension.
- Record
CVE-2007-2439- CVSS 2.0
- 9.4 High
AV:N/AC:L/Au:N/C:C/I:N/A:C - Updated
- 2026-11-02
CVE List No score
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service (device hang) and read data from a COM or LPT device via a DOS device name with an arbitrary extension.
- Record
CVE-2007-2439- Updated
- 2026-11-02
EUVDEUVD-2007-2434 No score
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service (device hang) and read data from a COM or LPT device via a DOS device name with an arbitrary extension.
- Record
EUVD-2007-2434- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w4mm-7hr6-qxr5 No score
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote...
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service (device hang) and read data from a COM or LPT device via a DOS device name with an arbitrary extension.
- Record
GHSA-w4mm-7hr6-qxr5- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2439 is a high vulnerability (CVSS 9.4) in Caucho Technology Resin, published May 16, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.31%, the 83rd percentile. No source names a fixed version.
References
osvdb.org/36059
exchange.xforce.ibmcloud.com/vulnerabilities/34301
securitytracker.com/id?1018061
secunia.com/advisories/25286
vupen.com/english/advisories/2007/1824
rapid7.com/advisories/R7-0028.jsp
caucho.com/resin-3.1/changes/changes.xtp
nvd.nist.gov/vuln/detail/CVE-2007-2439
github.com/advisories/GHSA-w4mm-7hr6-qxr5