Vulnerability Details CVE-2007-2789
The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.047
EPSS Ranking 88.7%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2007-2789
-
-
-
-
cpe:2.3:a:sun:jre:1.3.1_03
-
cpe:2.3:a:sun:jre:1.3.1_04
-
cpe:2.3:a:sun:jre:1.3.1_05
-
cpe:2.3:a:sun:jre:1.3.1_06
-
cpe:2.3:a:sun:jre:1.3.1_07
-
cpe:2.3:a:sun:jre:1.3.1_08
-
cpe:2.3:a:sun:jre:1.3.1_09
-
cpe:2.3:a:sun:jre:1.3.1_10
-
cpe:2.3:a:sun:jre:1.3.1_11
-
cpe:2.3:a:sun:jre:1.3.1_12
-
cpe:2.3:a:sun:jre:1.3.1_13
-
cpe:2.3:a:sun:jre:1.3.1_14
-
cpe:2.3:a:sun:jre:1.3.1_15
-
cpe:2.3:a:sun:jre:1.3.1_16
-
cpe:2.3:a:sun:jre:1.3.1_17
-
cpe:2.3:a:sun:jre:1.3.1_18
-
cpe:2.3:a:sun:jre:1.3.1_19
-
cpe:2.3:a:sun:jre:1.3.1_2
-
-
cpe:2.3:a:sun:jre:1.4.2_1
-
cpe:2.3:a:sun:jre:1.4.2_10
-
cpe:2.3:a:sun:jre:1.4.2_11
-
cpe:2.3:a:sun:jre:1.4.2_12
-
cpe:2.3:a:sun:jre:1.4.2_13
-
cpe:2.3:a:sun:jre:1.4.2_14
-
cpe:2.3:a:sun:jre:1.4.2_2
-
cpe:2.3:a:sun:jre:1.4.2_3
-
cpe:2.3:a:sun:jre:1.4.2_4
-
cpe:2.3:a:sun:jre:1.4.2_5
-
cpe:2.3:a:sun:jre:1.4.2_6
-
cpe:2.3:a:sun:jre:1.4.2_7
-
cpe:2.3:a:sun:jre:1.4.2_8
-
cpe:2.3:a:sun:jre:1.4.2_9
-
-
-
-
cpe:2.3:a:sun:sdk:1.3.1_01
-
Sun
»
Sdk
»
Version: 1.3.1_01a
cpe:2.3:a:sun:sdk:1.3.1_01a
-
cpe:2.3:a:sun:sdk:1.3.1_02
-
cpe:2.3:a:sun:sdk:1.3.1_03
-
cpe:2.3:a:sun:sdk:1.3.1_04
-
cpe:2.3:a:sun:sdk:1.3.1_05
-
cpe:2.3:a:sun:sdk:1.3.1_06
-
cpe:2.3:a:sun:sdk:1.3.1_07
-
cpe:2.3:a:sun:sdk:1.3.1_08
-
cpe:2.3:a:sun:sdk:1.3.1_09
-
cpe:2.3:a:sun:sdk:1.3.1_10
-
cpe:2.3:a:sun:sdk:1.3.1_11
-
cpe:2.3:a:sun:sdk:1.3.1_12
-
cpe:2.3:a:sun:sdk:1.3.1_13
-
cpe:2.3:a:sun:sdk:1.3.1_14
-
cpe:2.3:a:sun:sdk:1.3.1_15
-
cpe:2.3:a:sun:sdk:1.3.1_16
-
cpe:2.3:a:sun:sdk:1.3.1_17
-
cpe:2.3:a:sun:sdk:1.3.1_18
-
cpe:2.3:a:sun:sdk:1.3.1_19
-
-
cpe:2.3:a:sun:sdk:1.4.2_1
-
cpe:2.3:a:sun:sdk:1.4.2_10
-
cpe:2.3:a:sun:sdk:1.4.2_11
-
cpe:2.3:a:sun:sdk:1.4.2_12
-
cpe:2.3:a:sun:sdk:1.4.2_13
-
cpe:2.3:a:sun:sdk:1.4.2_14
-
cpe:2.3:a:sun:sdk:1.4.2_2
-
cpe:2.3:a:sun:sdk:1.4.2_3
-
cpe:2.3:a:sun:sdk:1.4.2_4
-
cpe:2.3:a:sun:sdk:1.4.2_5
-
cpe:2.3:a:sun:sdk:1.4.2_6
-
cpe:2.3:a:sun:sdk:1.4.2_7
-
cpe:2.3:a:sun:sdk:1.4.2_8
-
cpe:2.3:a:sun:sdk:1.4.2_9