CVE-2009-4776
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit...
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.
- Record
CVE-2009-4776- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.
- Record
CVE-2009-4776- Updated
- 2026-11-02
EUVDEUVD-2009-4739 No score
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.
- Record
EUVD-2009-4739- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8fh2-gm95-pm7q No score
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit...
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.
- Record
GHSA-8fh2-gm95-pm7q- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
- hitachi processing kit for xml
- hitachi cosminexus\/opentp1 web web front-endset
- hitachi cosminexus application server
- hitachi cosminexus client
- hitachi cosminexus developer
- hitachi cosminexus server
- hitachi cosminexus studio
- hitachi developer\'s kit for java
- hitachi electronic form workflow-developer client set
- hitachi electronic form workflow-developer set
- hitachi electronic form workflow-professional library set
- hitachi electronic form workflow-professional set
Show 13 moreShow less
- hitachi electronic form workflow-standard set
- hitachi electronic form workflow set
- hitachi groupmax collaboration
- hitachi ibm xl c\/c\+\+ v7 for aix \& hitachi developer\'s kit for java
- hitachi ibm xl c\/c\+\+ v8 for aix \& hitachi developer\'s kit for java
- hitachi ucosminexus\/opentp1 web web front-endset
- hitachi ucosminexus application server
- hitachi ucosminexus client
- hitachi ucosminexus collaboration
- hitachi ucosminexus developer
- hitachi ucosminexus operator
- hitachi ucosminexus service architect
- hitachi ucosminexus service platform
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-4776 is a high vulnerability (CVSS 9.3) in Hitachi Processing Kit For Xml, published April 21, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.07%, the 87th percentile. No source names a fixed version.