CVE-2007-2788
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK)...
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
6.8
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.
- Record
CVE-2007-2788- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.
- Record
CVE-2007-2788- Updated
- 2026-11-02
EUVDEUVD-2007-2780 No score
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.
- Record
EUVD-2007-2780- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cjwj-wvcj-rr5c No score
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK)...
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.
- Record
GHSA-cjwj-wvcj-rr5c- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.4.2-ibmRed Hat:rhel_extras:3 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el3 | 0:1.4.2.9-1jpp.1.el3 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:3 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el3 | 0:1.4.2.9-1jpp.1.el3 |
java-1.4.2-ibm-develRed Hat:rhel_extras:3 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el3 | 0:1.4.2.9-1jpp.1.el3 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:3 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el3 | 0:1.4.2.9-1jpp.1.el3 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:3 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el3 | 0:1.4.2.9-1jpp.1.el3 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:3 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el3 | 0:1.4.2.9-1jpp.1.el3 |
java-1.4.2-ibmRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
Show 98 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
java-1.4.2-ibmRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-beaRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-demoRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-develRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-jdbcRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-missioncontrolRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-srcRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.4.2-beaRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.15-1jpp.2.el4 | 0:1.4.2.15-1jpp.2.el4 |
java-1.4.2-bea-develRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.15-1jpp.2.el4 | 0:1.4.2.15-1jpp.2.el4 |
java-1.4.2-bea-jdbcRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.15-1jpp.2.el4 | 0:1.4.2.15-1jpp.2.el4 |
java-1.4.2-beaRed Hat:rhel_extras:3 From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el3 | 0:1.4.2.16-1jpp.1.el3 |
java-1.4.2-bea-develRed Hat:rhel_extras:3 From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el3 | 0:1.4.2.16-1jpp.1.el3 |
java-1.4.2-bea-jdbcRed Hat:rhel_extras:3 From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el3 | 0:1.4.2.16-1jpp.1.el3 |
java-1.4.2-beaRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-demoRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-develRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-jdbcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-missioncontrolRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-srcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-beaRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-demoRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-develRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-jdbcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-missioncontrolRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-srcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
jabberdRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.0s10-3.37.rhn | 0:2.0s10-3.37.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
jfreechartRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.24-1.el3 | 0:2.24-1.el3 |
rhn-apacheRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel3 | 0:1.3.27-36.rhn.rhel3 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel3 | 0:1.2.23-2rhn.rhel3 |
rhn-modperlRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel3 | 0:1.29-16.rhel3 |
rhn-modsslRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel3 | 0:2.8.12-8.rhn.10.rhel3 |
tomcat5Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Sun Java JDK 1.x - Multiple Vulnerabilities | 2007-05-16 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2788 is a medium vulnerability (CVSS 6.8) in Sun Jdk, published May 22, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 18.2%, the 97th percentile. No source names a fixed version.
References
secunia.com/advisories/26933
docs.info.apple.com/article.html?artnum=307177
lists.vmware.com/pipermail/security-announce/2008/000003.html
secunia.com/advisories/26049
dev2dev.bea.com/pub/advisory/248
secunia.com/advisories/26311
Show 194 moreShow less
attrition.org/pipermail/vim/2007-July/001696.html
exchange.xforce.ibmcloud.com/vulnerabilities/34652
sunsolve.sun.com/search/document.do?assetkey=1-66-200856-1
scary.beasts.org/security/CESA-2006-004.html
secunia.com/advisories/30805
vupen.com/english/advisories/2008/0065
exchange.xforce.ibmcloud.com/vulnerabilities/34318
kb.cert.org/vuls/id/138545
gentoo.org/security/en/glsa/glsa-200705-23.xml
securityfocus.com/bid/24004
attrition.org/pipermail/vim/2007-December/001862.html
secunia.com/advisories/26369
security.gentoo.org/glsa/glsa-200804-28.xml
sunsolve.sun.com/search/document.do?assetkey=1-26-102934-1
secunia.com/advisories/28056
secunia.com/advisories/29858
novell.com/linux/security/advisories/2007_45_java.html
vupen.com/english/advisories/2007/1836
lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
redhat.com/support/errata/RHSA-2008-0100.html
redhat.com/support/errata/RHSA-2007-0956.html
support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html
redhat.com/support/errata/RHSA-2007-0817.html
secunia.com/advisories/26645
secunia.com/advisories/26119
secunia.com/advisories/28365
securityfocus.com/bid/24267
secunia.com/advisories/25832
vupen.com/english/advisories/2007/4224
security.gentoo.org/glsa/glsa-200706-08.xml
secunia.com/advisories/30780
secunia.com/advisories/25295
vupen.com/english/advisories/2007/3009
secunia.com/advisories/27266
novell.com/linux/security/advisories/2007_56_ibmjava.html
attrition.org/pipermail/vim/2007-July/001708.html
gentoo.org/security/en/glsa/glsa-200709-15.xml
secunia.com/advisories/28115
securitytracker.com/id?1018182
redhat.com/support/errata/RHSA-2008-0261.html
secunia.com/advisories/29340
secunia.com/advisories/25474
redhat.com/support/errata/RHSA-2007-1086.html
secunia.com/advisories/27203
attrition.org/pipermail/vim/2007-July/001697.html
gentoo.org/security/en/glsa/glsa-200804-20.xml
gentoo.org/security/en/glsa/glsa-200806-11.xml
support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html
redhat.com/support/errata/RHSA-2007-0829.html
secunia.com/advisories/26631
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11700
redhat.com/support/errata/RHSA-2008-0133.html
nvd.nist.gov/vuln/detail/CVE-2007-2788
github.com/advisories/GHSA-cjwj-wvcj-rr5c
access.redhat.com/errata/RHSA-2007:0817
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=239660
bugzilla.redhat.com/show_bug.cgi?id=242595
bugzilla.redhat.com/show_bug.cgi?id=250733
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0817.json
access.redhat.com/security/cve/CVE-2007-2435
cve.org/CVERecord?id=CVE-2007-2435
nvd.nist.gov/vuln/detail/CVE-2007-2435
access.redhat.com/security/cve/CVE-2007-2788
bugzilla.redhat.com/show_bug.cgi?id=250725
cve.org/CVERecord?id=CVE-2007-2788
access.redhat.com/security/cve/CVE-2007-2789
bugzilla.redhat.com/show_bug.cgi?id=250729
cve.org/CVERecord?id=CVE-2007-2789
nvd.nist.gov/vuln/detail/CVE-2007-2789
access.redhat.com/errata/RHSA-2007:0829
bugzilla.redhat.com/show_bug.cgi?id=246765
bugzilla.redhat.com/show_bug.cgi?id=248864
bugzilla.redhat.com/show_bug.cgi?id=249533
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0829.json
access.redhat.com/security/cve/CVE-2007-3503
cve.org/CVERecord?id=CVE-2007-3503
nvd.nist.gov/vuln/detail/CVE-2007-3503
access.redhat.com/security/cve/CVE-2007-3655
cve.org/CVERecord?id=CVE-2007-3655
nvd.nist.gov/vuln/detail/CVE-2007-3655
access.redhat.com/security/cve/CVE-2007-3922
cve.org/CVERecord?id=CVE-2007-3922
nvd.nist.gov/vuln/detail/CVE-2007-3922
access.redhat.com/security/cve/CVE-2007-4381
bugzilla.redhat.com/show_bug.cgi?id=253488
cve.org/CVERecord?id=CVE-2007-4381
nvd.nist.gov/vuln/detail/CVE-2007-4381
access.redhat.com/errata/RHSA-2007:0956
bugzilla.redhat.com/show_bug.cgi?id=249539
bugzilla.redhat.com/show_bug.cgi?id=325941
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0956.json
access.redhat.com/security/cve/CVE-2007-0243
cve.org/CVERecord?id=CVE-2007-0243
nvd.nist.gov/vuln/detail/CVE-2007-0243
access.redhat.com/security/cve/CVE-2007-3698
cve.org/CVERecord?id=CVE-2007-3698
nvd.nist.gov/vuln/detail/CVE-2007-3698
access.redhat.com/errata/RHSA-2007:1086
dev2dev.bea.com/pub/advisory/249
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1086.json
access.redhat.com/errata/RHSA-2008:0100
dev2dev.bea.com/pub/advisory/272
bugzilla.redhat.com/show_bug.cgi?id=321951
bugzilla.redhat.com/show_bug.cgi?id=321991
bugzilla.redhat.com/show_bug.cgi?id=324351
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0100.json
access.redhat.com/security/cve/CVE-2007-5232
cve.org/CVERecord?id=CVE-2007-5232
nvd.nist.gov/vuln/detail/CVE-2007-5232
access.redhat.com/security/cve/CVE-2007-5239
bugzilla.redhat.com/show_bug.cgi?id=321981
cve.org/CVERecord?id=CVE-2007-5239
nvd.nist.gov/vuln/detail/CVE-2007-5239
access.redhat.com/security/cve/CVE-2007-5240
cve.org/CVERecord?id=CVE-2007-5240
nvd.nist.gov/vuln/detail/CVE-2007-5240
access.redhat.com/security/cve/CVE-2007-5273
cve.org/CVERecord?id=CVE-2007-5273
nvd.nist.gov/vuln/detail/CVE-2007-5273
access.redhat.com/errata/RHSA-2008:0261
bugzilla.redhat.com/show_bug.cgi?id=396641
bugzilla.redhat.com/show_bug.cgi?id=444136
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0261.json
access.redhat.com/security/cve/CVE-2004-0885
bugzilla.redhat.com/show_bug.cgi?id=430637
cve.org/CVERecord?id=CVE-2004-0885
nvd.nist.gov/vuln/detail/CVE-2004-0885
access.redhat.com/security/cve/CVE-2005-0605
bugzilla.redhat.com/show_bug.cgi?id=430520
cve.org/CVERecord?id=CVE-2005-0605
nvd.nist.gov/vuln/detail/CVE-2005-0605
access.redhat.com/security/cve/CVE-2005-2090
bugzilla.redhat.com/show_bug.cgi?id=237079
cve.org/CVERecord?id=CVE-2005-2090
nvd.nist.gov/vuln/detail/CVE-2005-2090
access.redhat.com/security/cve/CVE-2005-3510
bugzilla.redhat.com/show_bug.cgi?id=237085
cve.org/CVERecord?id=CVE-2005-3510
nvd.nist.gov/vuln/detail/CVE-2005-3510
access.redhat.com/security/cve/CVE-2005-3964
bugzilla.redhat.com/show_bug.cgi?id=430519
cve.org/CVERecord?id=CVE-2005-3964
nvd.nist.gov/vuln/detail/CVE-2005-3964
access.redhat.com/security/cve/CVE-2005-4838
bugzilla.redhat.com/show_bug.cgi?id=238401
cve.org/CVERecord?id=CVE-2005-4838
nvd.nist.gov/vuln/detail/CVE-2005-4838
access.redhat.com/security/cve/CVE-2006-0254
bugzilla.redhat.com/show_bug.cgi?id=430646
cve.org/CVERecord?id=CVE-2006-0254
nvd.nist.gov/vuln/detail/CVE-2006-0254
access.redhat.com/security/cve/CVE-2006-0898
bugzilla.redhat.com/show_bug.cgi?id=430522
cve.org/CVERecord?id=CVE-2006-0898
nvd.nist.gov/vuln/detail/CVE-2006-0898
access.redhat.com/security/cve/CVE-2006-1329
bugzilla.redhat.com/show_bug.cgi?id=429254
cve.org/CVERecord?id=CVE-2006-1329
nvd.nist.gov/vuln/detail/CVE-2006-1329
access.redhat.com/security/cve/CVE-2006-3835
bugzilla.redhat.com/show_bug.cgi?id=237084
cve.org/CVERecord?id=CVE-2006-3835
nvd.nist.gov/vuln/detail/CVE-2006-3835
access.redhat.com/security/cve/CVE-2006-5752
bugzilla.redhat.com/show_bug.cgi?id=245112
cve.org/CVERecord?id=CVE-2006-5752
nvd.nist.gov/vuln/detail/CVE-2006-5752
access.redhat.com/security/cve/CVE-2006-7195
bugzilla.redhat.com/show_bug.cgi?id=237081
cve.org/CVERecord?id=CVE-2006-7195
nvd.nist.gov/vuln/detail/CVE-2006-7195
access.redhat.com/security/cve/CVE-2006-7196
bugzilla.redhat.com/show_bug.cgi?id=238131
cve.org/CVERecord?id=CVE-2006-7196
nvd.nist.gov/vuln/detail/CVE-2006-7196
bugzilla.redhat.com/show_bug.cgi?id=430642
cve.org/CVERecord?id=CVE-2006-7197
nvd.nist.gov/vuln/detail/CVE-2006-7197
bugzilla.redhat.com/show_bug.cgi?id=237080
cve.org/CVERecord?id=CVE-2007-0450
nvd.nist.gov/vuln/detail/CVE-2007-0450
bugzilla.redhat.com/show_bug.cgi?id=240423
cve.org/CVERecord?id=CVE-2007-1349
nvd.nist.gov/vuln/detail/CVE-2007-1349
cve.org/CVERecord?id=CVE-2007-1355
nvd.nist.gov/vuln/detail/CVE-2007-1355
cve.org/CVERecord?id=CVE-2007-1358
nvd.nist.gov/vuln/detail/CVE-2007-1358
cve.org/CVERecord?id=CVE-2007-1860
nvd.nist.gov/vuln/detail/CVE-2007-1860
cve.org/CVERecord?id=CVE-2007-2449
nvd.nist.gov/vuln/detail/CVE-2007-2449
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0524.json
Left out here: 68 references. The JSON record has them.