CVSS: 9.3EPSS: 1%CPEs: 295EXPL: 0CVE-2009-4776
https://notcve.org/view.php?id=CVE-2009-4776
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794. Desbordamiento de búfer en Hitachi Cosminexus V4 a la V8, Processing Kit para XML, y Developer's Kit para Java, usado en productos como uCosminexus, Electronic Form Workflow, Groupmax, e IBM XL C/C++ Enterprise Edition 7 y 8, permite a atacantes remotos tener un impacto desconocido a través de vectores relacionados con el uso del procesamiento de imágenes GIF mediante APIs para aplicaciones Java. Cuestión distinta del CVE-2007-3794. • http://osvdb.org/57834 http://secunia.com/advisories/36622 http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html http://www.securityfocus.com/bid/36309 http://www.vupen.com/english/advisories/2009/2574 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.3EPSS: 1%CPEs: 10EXPL: 0CVE-2007-5282
https://notcve.org/view.php?id=CVE-2007-5282
Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web Edition 04-00 and 04-01, might allow remote attackers to cause a denial of service (agent process crash) via invalid data from clients other than Cosminexus Manager. Hitachi Cosminexus Agent 03-00 hasta 03-05, y Cosminexus Library Standard y Web Edition 04-00 y 04-01, podría permitir a atacantes remotos provocar una denegación de servicio (caída del proceso agente) mediante información inválida de otros clientes que no son Cosminexus Manager. • http://secunia.com/advisories/27074 http://www.hitachi-support.com/security_e/vuls_e/HS07-033_e/index-e.html http://www.securityfocus.com/bid/25937 http://www.vupen.com/english/advisories/2007/3377 https://exchange.xforce.ibmcloud.com/vulnerabilities/36966 • CWE-20: Improper Input Validation •