CVE-2009-4776: Hitachi cosminexus/opentp1 Web Web Front-Endset

High severity, CVSS 9.3. EPSS: 3.1% chance of exploitation in the next 30 days.

Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794.

Affected products

  • Hitachi cosminexus/opentp1 Web Web Front-Endset: version 01-00 only; version 01-00-/b only; version 01-01 only; version 01-01-/c only; version 02-00 only; version 02-00-/a only; …
  • Hitachi Cosminexus Application Server: version 5 only; version 05-00 only; version 05-00-/i only; version 05-00-/s only; version 05-01 only; version 05-01-/l only; …
  • Hitachi Cosminexus Client: version 06-00 only; version 06-00-/i only; version 06-02 only; version 06-02-/g only; version 06-50 only; version 06-50-/f only; …
  • Hitachi Cosminexus Developer: version 5 only; version 05-00 only; version 05-00-/i only; version 05-01 only; version 05-01-/l only; version 05-05 only; …
  • Hitachi Cosminexus Server: version 04-00 only; version 04-00-/a only; version 04-01 only; version 04-01-/a only
  • Hitachi Cosminexus Studio: version 04-00 only; version 04-00-/a only; version 04-01 only; version 04-01-/a only; version 05-00 only; version 05-00-/i only; …
  • Hitachi Developer's Kit For Java: any version
  • Hitachi Electronic Form Workflow-Developer Client Set: version 06-70 only; version 06-70-/f only; version 07-00 only; version 07-00-/c only; version 07-10 only; version 07-10-/a only; …
  • Hitachi Electronic Form Workflow-Developer Set: version 07-50 only; version 07-50-/d only; version 07-60 only; version 07-60-/i only
  • Hitachi Electronic Form Workflow-Professional Library Set: version 06-70 only; version 06-70-/c only; version 06-70-/f only; version 07-00 only; version 07-00-/b only; version 07-00-/c only; …
  • Hitachi Electronic Form Workflow-Professional Set: version 07-50 only; version 07-50-/d only
  • Hitachi Electronic Form Workflow-Standard Set: version 06-70 only; version 06-70-/c only; version 06-70-/f only; version 07-00 only; version 07-00-/b only; version 07-00-/c only; …
  • Hitachi Electronic Form Workflow Set: version 07-50 only; version 07-50-/d only; version 07-60 only; version 07-60-/i only
  • Hitachi Groupmax Collaboration: version 07-20 only; version 07-20-/d only; version 07-30 only; version 07-30-/f only; version 07-35 only; version 07-35-/f only
  • Hitachi IBM Xl C/c++ v7 For Aix & Hitachi Developer's Kit For Java: version 01-00 only
  • Hitachi IBM Xl C/c++ v8 For Aix & Hitachi Developer's Kit For Java: version 01-00 only
  • Hitachi Processing Kit For XML: version 01-00 only; version 01-05 only; version 01-05-/a only; version 01-05-/b only; version 01-05-/c only; version 01-05-/d only; …
  • Hitachi ucosminexus/opentp1 Web Web Front-Endset: version 02-70 only; version 02-70-/a only
  • Hitachi Ucosminexus Application Server: version 06-70 only; version 06-70-/a only; version 06-70-/e only; version 06-70-/f only; version 06-70-/g only; version 06-70-/l only; …
  • Hitachi Ucosminexus Client: version 06-70 only; version 06-70-/f only; version 06-71 only; version 06-71-/f only; version 07-00 only; version 07-60 only; …
  • Hitachi Ucosminexus Collaboration: version 06-20 only; version 06-20-/d only; version 06-30 only; version 06-30-/f only; version 06-35 only; version 06-35-/f only
  • Hitachi Ucosminexus Developer: version 6 only; version 06-70 only; version 06-70-/f only; version 06-71 only; version 06-71-/f only; version 6.7 only; …
  • Hitachi Ucosminexus Operator: version 6.7 only; version 7 only; version 07-00 only; version 07-60 only; version 8 only
  • Hitachi Ucosminexus Service Architect: version 6.7 only; version 7 only; version 07-00 only; version 07-60 only; version 8 only; version 08-00 only
  • Hitachi Ucosminexus Service Platform: version 6.7 only; version 7 only; version 07-00 only; version 07-10 only; version 07-60 only; version 8 only; …

Published 2010-04-21. Last modified 2026-06-16.