CVE-2007-3794: Hitachi Cosminexus Application Server

High severity, CVSS 10.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.

Affected products

Hitachi Cosminexus Application Server: version 05_00_05_00_h only; version 05_01_05_01_k only; version 05_05_05_00_o only; version 06_00_06_00_g only; version 06_02_06_02_f only; version 06_50_06_50_e only; …
Hitachi Cosminexus Client: version 06_00_06_00_g only; version 06_02_06_02_f only; version 06_50_06_50_e only; version 06_51_06_51_g only
Hitachi Cosminexus Developer: version 05_00_05_00_h only; version 05_01_05_01_k only; version 05_05_05_05_o only; version 06_00_06_00_g only; version 06_02_06_02_f only; version 06_50_06_50_e only; …
Hitachi Cosminexus Server: version 04_00_04_00_a only; version 04_01_04_01_a only
Hitachi Cosminexus Studio: version 04_00_04_00_a only; version 04_01_04_01_a only; version 05_05_05_05_o only
Hitachi Ucosminexus Application Server: version 06_70_06_70_a only; version 06_70_06_70_b only; version 06_71_06_71_b only; version 07_00_07_20 only; version 07_00_07_10 only; version 06_70_06_70_h only; …
Hitachi Ucosminexus Client: version 06_70_06_70_b only; version 06_71_06_71_b only; version 07_00_07_20 only
Hitachi Ucosminexus Developer: version 06_70_06_70_b only; version 06_71_06_71_b only
Hitachi Ucosminexus Operator: version 07_00_07_20 only
Hitachi Ucosminexus Service Architect: version 07_00_07_20 only
Hitachi Ucosminexus Service Platform: version 07_00_07_20 only; version 07_00_07_10 only; version 07_10 only

Published 2007-07-15. Last modified 2026-06-16.