CVE-2007-2789
The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6...
The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.
Exploit likelihood
What each source reports
NVD Score used
4.3
The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.
- Record
CVE-2007-2789- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.
- Record
CVE-2007-2789- Updated
- 2026-11-02
EUVDEUVD-2007-2781 No score
The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.
- Record
EUVD-2007-2781- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r5wh-4xhf-r4xr No score
The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6...
The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.
- Record
GHSA-r5wh-4xhf-r4xr- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.4.2-ibmRed Hat:rhel_extras:3 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el3 | 0:1.4.2.9-1jpp.1.el3 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:3 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el3 | 0:1.4.2.9-1jpp.1.el3 |
java-1.4.2-ibm-develRed Hat:rhel_extras:3 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el3 | 0:1.4.2.9-1jpp.1.el3 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:3 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el3 | 0:1.4.2.9-1jpp.1.el3 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:3 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el3 | 0:1.4.2.9-1jpp.1.el3 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:3 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el3 | 0:1.4.2.9-1jpp.1.el3 |
java-1.4.2-ibmRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
java-1.4.2-ibm-develRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
Show 98 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el4 | 0:1.4.2.9-1jpp.1.el4 |
java-1.4.2-ibmRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibmRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.4.2-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 3 CVEs |
before 0:1.4.2.9-1jpp.1.el5 | 0:1.4.2.9-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.2.el4 | 1:1.5.0.5-1jpp.2.el4 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 7 CVEs |
before 1:1.5.0.5-1jpp.0.1.el5 | 1:1.5.0.5-1jpp.0.1.el5 |
java-1.5.0-beaRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-demoRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-develRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-jdbcRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-missioncontrolRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.5.0-bea-srcRed Hat:rhel_extras:5::server From an advisory covering 6 CVEs |
before 0:1.5.0.11-1jpp.1.el5 | 0:1.5.0.11-1jpp.1.el5 |
java-1.4.2-beaRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.15-1jpp.2.el4 | 0:1.4.2.15-1jpp.2.el4 |
java-1.4.2-bea-develRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.15-1jpp.2.el4 | 0:1.4.2.15-1jpp.2.el4 |
java-1.4.2-bea-jdbcRed Hat:rhel_extras:4 From an advisory covering 4 CVEs |
before 0:1.4.2.15-1jpp.2.el4 | 0:1.4.2.15-1jpp.2.el4 |
java-1.4.2-beaRed Hat:rhel_extras:3 From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el3 | 0:1.4.2.16-1jpp.1.el3 |
java-1.4.2-bea-develRed Hat:rhel_extras:3 From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el3 | 0:1.4.2.16-1jpp.1.el3 |
java-1.4.2-bea-jdbcRed Hat:rhel_extras:3 From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el3 | 0:1.4.2.16-1jpp.1.el3 |
java-1.4.2-beaRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-demoRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-develRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-jdbcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-missioncontrolRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-srcRed Hat:rhel_extras:5::client From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-beaRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-demoRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-develRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-jdbcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-missioncontrolRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
java-1.4.2-bea-srcRed Hat:rhel_extras:5::server From an advisory covering 8 CVEs |
before 0:1.4.2.16-1jpp.1.el5 | 0:1.4.2.16-1jpp.1.el5 |
jabberdRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.0s10-3.37.rhn | 0:2.0s10-3.37.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
jfreechartRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.24-1.el3 | 0:2.24-1.el3 |
rhn-apacheRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel3 | 0:1.3.27-36.rhn.rhel3 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel3 | 0:1.2.23-2rhn.rhel3 |
rhn-modperlRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel3 | 0:1.29-16.rhel3 |
rhn-modsslRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel3 | 0:2.8.12-8.rhn.10.rhel3 |
tomcat5Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2789 is a medium vulnerability (CVSS 4.3) in Sun Jdk, published May 22, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.48%, the 89th percentile. No source names a fixed version.
References
secunia.com/advisories/26933
docs.info.apple.com/article.html?artnum=307177
exchange.xforce.ibmcloud.com/vulnerabilities/34654
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10800
secunia.com/advisories/26049
dev2dev.bea.com/pub/advisory/248
Show 194 moreShow less
secunia.com/advisories/26311
attrition.org/pipermail/vim/2007-July/001696.html
sunsolve.sun.com/search/document.do?assetkey=1-66-200856-1
scary.beasts.org/security/CESA-2006-004.html
secunia.com/advisories/30805
gentoo.org/security/en/glsa/glsa-200705-23.xml
securityfocus.com/bid/24004
attrition.org/pipermail/vim/2007-December/001862.html
secunia.com/advisories/26369
security.gentoo.org/glsa/glsa-200804-28.xml
sunsolve.sun.com/search/document.do?assetkey=1-26-102934-1
secunia.com/advisories/28056
secunia.com/advisories/29858
novell.com/linux/security/advisories/2007_45_java.html
vupen.com/english/advisories/2007/1836
exchange.xforce.ibmcloud.com/vulnerabilities/34320
lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html
redhat.com/support/errata/RHSA-2008-0100.html
redhat.com/support/errata/RHSA-2007-0956.html
support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html
redhat.com/support/errata/RHSA-2007-0817.html
secunia.com/advisories/26645
secunia.com/advisories/26119
secunia.com/advisories/25832
vupen.com/english/advisories/2007/4224
security.gentoo.org/glsa/glsa-200706-08.xml
secunia.com/advisories/30780
secunia.com/advisories/25295
vupen.com/english/advisories/2007/3009
secunia.com/advisories/27266
novell.com/linux/security/advisories/2007_56_ibmjava.html
attrition.org/pipermail/vim/2007-July/001708.html
gentoo.org/security/en/glsa/glsa-200709-15.xml
secunia.com/advisories/28115
securitytracker.com/id?1018182
redhat.com/support/errata/RHSA-2008-0261.html
secunia.com/advisories/29340
secunia.com/advisories/25474
redhat.com/support/errata/RHSA-2007-1086.html
secunia.com/advisories/27203
attrition.org/pipermail/vim/2007-July/001697.html
gentoo.org/security/en/glsa/glsa-200804-20.xml
gentoo.org/security/en/glsa/glsa-200806-11.xml
support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html
redhat.com/support/errata/RHSA-2007-0829.html
secunia.com/advisories/26631
redhat.com/support/errata/RHSA-2008-0133.html
nvd.nist.gov/vuln/detail/CVE-2007-2789
github.com/advisories/GHSA-r5wh-4xhf-r4xr
access.redhat.com/errata/RHSA-2007:0817
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=239660
bugzilla.redhat.com/show_bug.cgi?id=242595
bugzilla.redhat.com/show_bug.cgi?id=250733
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0817.json
access.redhat.com/security/cve/CVE-2007-2435
cve.org/CVERecord?id=CVE-2007-2435
nvd.nist.gov/vuln/detail/CVE-2007-2435
access.redhat.com/security/cve/CVE-2007-2788
bugzilla.redhat.com/show_bug.cgi?id=250725
cve.org/CVERecord?id=CVE-2007-2788
nvd.nist.gov/vuln/detail/CVE-2007-2788
access.redhat.com/security/cve/CVE-2007-2789
bugzilla.redhat.com/show_bug.cgi?id=250729
cve.org/CVERecord?id=CVE-2007-2789
access.redhat.com/errata/RHSA-2007:0829
bugzilla.redhat.com/show_bug.cgi?id=246765
bugzilla.redhat.com/show_bug.cgi?id=248864
bugzilla.redhat.com/show_bug.cgi?id=249533
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0829.json
access.redhat.com/security/cve/CVE-2007-3503
cve.org/CVERecord?id=CVE-2007-3503
nvd.nist.gov/vuln/detail/CVE-2007-3503
access.redhat.com/security/cve/CVE-2007-3655
cve.org/CVERecord?id=CVE-2007-3655
nvd.nist.gov/vuln/detail/CVE-2007-3655
access.redhat.com/security/cve/CVE-2007-3922
cve.org/CVERecord?id=CVE-2007-3922
nvd.nist.gov/vuln/detail/CVE-2007-3922
access.redhat.com/security/cve/CVE-2007-4381
bugzilla.redhat.com/show_bug.cgi?id=253488
cve.org/CVERecord?id=CVE-2007-4381
nvd.nist.gov/vuln/detail/CVE-2007-4381
access.redhat.com/errata/RHSA-2007:0956
bugzilla.redhat.com/show_bug.cgi?id=249539
bugzilla.redhat.com/show_bug.cgi?id=325941
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0956.json
access.redhat.com/security/cve/CVE-2007-0243
cve.org/CVERecord?id=CVE-2007-0243
nvd.nist.gov/vuln/detail/CVE-2007-0243
access.redhat.com/security/cve/CVE-2007-3698
cve.org/CVERecord?id=CVE-2007-3698
nvd.nist.gov/vuln/detail/CVE-2007-3698
access.redhat.com/errata/RHSA-2007:1086
dev2dev.bea.com/pub/advisory/249
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1086.json
access.redhat.com/errata/RHSA-2008:0100
dev2dev.bea.com/pub/advisory/272
bugzilla.redhat.com/show_bug.cgi?id=321951
bugzilla.redhat.com/show_bug.cgi?id=321991
bugzilla.redhat.com/show_bug.cgi?id=324351
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0100.json
access.redhat.com/security/cve/CVE-2007-5232
cve.org/CVERecord?id=CVE-2007-5232
nvd.nist.gov/vuln/detail/CVE-2007-5232
access.redhat.com/security/cve/CVE-2007-5239
bugzilla.redhat.com/show_bug.cgi?id=321981
cve.org/CVERecord?id=CVE-2007-5239
nvd.nist.gov/vuln/detail/CVE-2007-5239
access.redhat.com/security/cve/CVE-2007-5240
cve.org/CVERecord?id=CVE-2007-5240
nvd.nist.gov/vuln/detail/CVE-2007-5240
access.redhat.com/security/cve/CVE-2007-5273
cve.org/CVERecord?id=CVE-2007-5273
nvd.nist.gov/vuln/detail/CVE-2007-5273
access.redhat.com/errata/RHSA-2008:0261
bugzilla.redhat.com/show_bug.cgi?id=396641
bugzilla.redhat.com/show_bug.cgi?id=444136
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0261.json
access.redhat.com/security/cve/CVE-2004-0885
bugzilla.redhat.com/show_bug.cgi?id=430637
cve.org/CVERecord?id=CVE-2004-0885
nvd.nist.gov/vuln/detail/CVE-2004-0885
access.redhat.com/security/cve/CVE-2005-0605
bugzilla.redhat.com/show_bug.cgi?id=430520
cve.org/CVERecord?id=CVE-2005-0605
nvd.nist.gov/vuln/detail/CVE-2005-0605
access.redhat.com/security/cve/CVE-2005-2090
bugzilla.redhat.com/show_bug.cgi?id=237079
cve.org/CVERecord?id=CVE-2005-2090
nvd.nist.gov/vuln/detail/CVE-2005-2090
access.redhat.com/security/cve/CVE-2005-3510
bugzilla.redhat.com/show_bug.cgi?id=237085
cve.org/CVERecord?id=CVE-2005-3510
nvd.nist.gov/vuln/detail/CVE-2005-3510
access.redhat.com/security/cve/CVE-2005-3964
bugzilla.redhat.com/show_bug.cgi?id=430519
cve.org/CVERecord?id=CVE-2005-3964
nvd.nist.gov/vuln/detail/CVE-2005-3964
access.redhat.com/security/cve/CVE-2005-4838
bugzilla.redhat.com/show_bug.cgi?id=238401
cve.org/CVERecord?id=CVE-2005-4838
nvd.nist.gov/vuln/detail/CVE-2005-4838
access.redhat.com/security/cve/CVE-2006-0254
bugzilla.redhat.com/show_bug.cgi?id=430646
cve.org/CVERecord?id=CVE-2006-0254
nvd.nist.gov/vuln/detail/CVE-2006-0254
access.redhat.com/security/cve/CVE-2006-0898
bugzilla.redhat.com/show_bug.cgi?id=430522
cve.org/CVERecord?id=CVE-2006-0898
nvd.nist.gov/vuln/detail/CVE-2006-0898
access.redhat.com/security/cve/CVE-2006-1329
bugzilla.redhat.com/show_bug.cgi?id=429254
cve.org/CVERecord?id=CVE-2006-1329
nvd.nist.gov/vuln/detail/CVE-2006-1329
access.redhat.com/security/cve/CVE-2006-3835
bugzilla.redhat.com/show_bug.cgi?id=237084
cve.org/CVERecord?id=CVE-2006-3835
nvd.nist.gov/vuln/detail/CVE-2006-3835
access.redhat.com/security/cve/CVE-2006-5752
bugzilla.redhat.com/show_bug.cgi?id=245112
cve.org/CVERecord?id=CVE-2006-5752
nvd.nist.gov/vuln/detail/CVE-2006-5752
access.redhat.com/security/cve/CVE-2006-7195
bugzilla.redhat.com/show_bug.cgi?id=237081
cve.org/CVERecord?id=CVE-2006-7195
nvd.nist.gov/vuln/detail/CVE-2006-7195
access.redhat.com/security/cve/CVE-2006-7196
bugzilla.redhat.com/show_bug.cgi?id=238131
cve.org/CVERecord?id=CVE-2006-7196
nvd.nist.gov/vuln/detail/CVE-2006-7196
access.redhat.com/security/cve/CVE-2006-7197
bugzilla.redhat.com/show_bug.cgi?id=430642
cve.org/CVERecord?id=CVE-2006-7197
nvd.nist.gov/vuln/detail/CVE-2006-7197
bugzilla.redhat.com/show_bug.cgi?id=237080
cve.org/CVERecord?id=CVE-2007-0450
nvd.nist.gov/vuln/detail/CVE-2007-0450
bugzilla.redhat.com/show_bug.cgi?id=240423
cve.org/CVERecord?id=CVE-2007-1349
nvd.nist.gov/vuln/detail/CVE-2007-1349
bugzilla.redhat.com/show_bug.cgi?id=253166
cve.org/CVERecord?id=CVE-2007-1355
nvd.nist.gov/vuln/detail/CVE-2007-1355
cve.org/CVERecord?id=CVE-2007-1358
nvd.nist.gov/vuln/detail/CVE-2007-1358
cve.org/CVERecord?id=CVE-2007-1860
nvd.nist.gov/vuln/detail/CVE-2007-1860
cve.org/CVERecord?id=CVE-2007-2449
nvd.nist.gov/vuln/detail/CVE-2007-2449
cve.org/CVERecord?id=CVE-2007-2450
nvd.nist.gov/vuln/detail/CVE-2007-2450
nvd.nist.gov/vuln/detail/CVE-2007-3304
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0524.json
Left out here: 63 references. The JSON record has them.