Evil-DB LogoEvil-DB
← All CVEs

CVE-2007-2788

medium · 6.8

Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.

6.8
CVSS
18.2%
EPSS (exploit prob.)
97th
EPSS percentile
2007-05-22
Published

AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

CWE-189

Affected products

VendorProductAffected versions
sunjdk1.5.0
sunjdk1.5.0
sunjdk1.5.0
sunjdk1.5.0
sunjdk1.5.0
sunjdk1.5.0
sunjdk1.5.0
sunjdk1.5.0
sunjdk1.5.0
sunjdk1.5.0
sunjdk1.5.0
sunjdk1.6.0
sunjre1.3.1
sunjre1.3.1_2
sunjre1.3.1_03
sunjre1.3.1_04
sunjre1.3.1_05
sunjre1.3.1_06
sunjre1.3.1_07
sunjre1.3.1_08
sunjre1.3.1_09
sunjre1.3.1_10
sunjre1.3.1_11
sunjre1.3.1_12
sunjre1.3.1_13
sunjre1.3.1_14
sunjre1.3.1_15
sunjre1.3.1_16
sunjre1.3.1_17
sunjre1.3.1_18
sunjre1.3.1_19
sunjre1.3.1_20
sunjre1.4.2
sunjre1.4.2_1
sunjre1.4.2_2
sunjre1.4.2_3
sunjre1.4.2_4
sunjre1.4.2_5
sunjre1.4.2_6
sunjre1.4.2_7

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-2788