CVE-2007-2788 json
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b…
published 2007-05-22 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-2780
- cvss
- 6.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 18.2%
- EPSS 18.2% chance of exploitation in 30 days, percentile 97%
- public exploits
- 1
- Exploit-DB
Summary
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_20 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (JVM crash) via a crafted JPEG or BMP file that triggers a buffer overflow.
Patch / fix
- jabberd network satellite 4.2 2.0s10-3.37.rhn
- jabberd network satellite 5.0, network satellite 4.2 2.0s10-3.38.rhn
- tomcat5 network satellite 5.0, network satellite 4.2 5.0.30-0jpp_10rh
- jfreechart network satellite 5.0, network satellite 4.2 0.9.20-3.rhn
- rhn-apache network satellite 4.2 1.3.27-36.rhn.rhel3
- rhn-apache network satellite 5.0, network satellite 4.2 1.3.27-36.rhn.rhel4
- rhn-modssl network satellite 4.2 2.8.12-8.rhn.10.rhel3
- rhn-modssl network satellite 5.0, network satellite 4.2 2.8.12-8.rhn.10.rhel4
red hat advisories RHSA-2008:0524RHSA-2008:0261RHSA-2007:0956RHSA-2007:0829RHSA-2008:0100RHSA-2007:0817
- secunia.com/advisories/25295 advisory
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2007-2788 updated
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit
-
Red Hat Desktop version 3 Extras java-1.4.2-ibm 1.4.2.9-1jpp.1.el3, java-1.4.2-bea 1.4.2.16-1jpp.1.el3, java-1.4.2-ibm-src 1.4.2.9-1jpp.1.el3, java-1.4.2-ibm-demo 1.4.2.9-1jpp.1.el3, java-1.4.2-ibm-jdbc 1.4.2.9-1jpp.1.el3, java-1.4.2-bea-jdbc 1.4.2.16-1jpp.1.el3, +1 morefixed: vendor fix RHSA-2008:0100
-
Red Hat Desktop version 4 Extras java-1.4.2-ibm 1.4.2.9-1jpp.1.el4, java-1.5.0-ibm 1.5.0.5-1jpp.2.el4, java-1.4.2-bea 1.4.2.15-1jpp.2.el4, java-1.4.2-ibm-src 1.4.2.9-1jpp.1.el4, java-1.5.0-ibm-src 1.5.0.5-1jpp.2.el4, java-1.4.2-ibm-demo 1.4.2.9-1jpp.1.el4, +8 morefixed: vendor fix RHSA-2007:0817
-
Red Hat Enterprise Linux AS version 3 Extras java-1.4.2-ibm 1.4.2.9-1jpp.1.el3, java-1.4.2-bea 1.4.2.16-1jpp.1.el3, java-1.4.2-ibm-src 1.4.2.9-1jpp.1.el3, java-1.4.2-ibm-demo 1.4.2.9-1jpp.1.el3, java-1.4.2-ibm-jdbc 1.4.2.9-1jpp.1.el3, java-1.4.2-bea-jdbc 1.4.2.16-1jpp.1.el3, +1 morefixed: vendor fix RHSA-2008:0100
-
Red Hat Enterprise Linux AS version 4 Extras java-1.4.2-ibm 1.4.2.9-1jpp.1.el4, java-1.5.0-ibm 1.5.0.5-1jpp.2.el4, java-1.4.2-bea 1.4.2.15-1jpp.2.el4, java-1.4.2-ibm-src 1.4.2.9-1jpp.1.el4, java-1.5.0-ibm-src 1.5.0.5-1jpp.2.el4, java-1.4.2-ibm-demo 1.4.2.9-1jpp.1.el4, +8 morefixed: vendor fix RHSA-2007:0817
-
Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-ibm 1.4.2.9-1jpp.1.el5, java-1.4.2-bea 1.4.2.16-1jpp.1.el5, java-1.5.0-ibm 1.5.0.5-1jpp.0.1.el5, java-1.4.2-ibm-src 1.4.2.9-1jpp.1.el5, java-1.4.2-bea-src 1.4.2.16-1jpp.1.el5, java-1.4.2-ibm-demo 1.4.2.9-1jpp.1.el5, +11 more Red Hat Enterprise Linux ES version 3 Extras java-1.4.2-ibm 1.4.2.9-1jpp.1.el3, java-1.4.2-bea 1.4.2.16-1jpp.1.el3, java-1.4.2-ibm-src 1.4.2.9-1jpp.1.el3, java-1.4.2-ibm-demo 1.4.2.9-1jpp.1.el3, java-1.4.2-ibm-jdbc 1.4.2.9-1jpp.1.el3, java-1.4.2-bea-jdbc 1.4.2.16-1jpp.1.el3, +1 morefixed: vendor fix RHSA-2008:0100
-
Red Hat Enterprise Linux ES version 4 Extras java-1.4.2-ibm 1.4.2.9-1jpp.1.el4, java-1.5.0-ibm 1.5.0.5-1jpp.2.el4, java-1.4.2-bea 1.4.2.15-1jpp.2.el4, java-1.4.2-ibm-src 1.4.2.9-1jpp.1.el4, java-1.5.0-ibm-src 1.5.0.5-1jpp.2.el4, java-1.4.2-ibm-demo 1.4.2.9-1jpp.1.el4, +8 morefixed: vendor fix RHSA-2007:0817
-
Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-ibm 1.4.2.9-1jpp.1.el5, java-1.4.2-bea 1.4.2.16-1jpp.1.el5, java-1.5.0-bea 1.5.0.11-1jpp.1.el5, java-1.5.0-ibm 1.5.0.5-1jpp.0.1.el5, java-1.4.2-ibm-src 1.4.2.9-1jpp.1.el5, java-1.4.2-bea-src 1.4.2.16-1jpp.1.el5, +16 more Red Hat Enterprise Linux WS version 3 Extras java-1.4.2-ibm 1.4.2.9-1jpp.1.el3, java-1.4.2-bea 1.4.2.16-1jpp.1.el3, java-1.4.2-ibm-src 1.4.2.9-1jpp.1.el3, java-1.4.2-ibm-demo 1.4.2.9-1jpp.1.el3, java-1.4.2-ibm-jdbc 1.4.2.9-1jpp.1.el3, java-1.4.2-bea-jdbc 1.4.2.16-1jpp.1.el3, +1 morefixed: vendor fix RHSA-2008:0100
-
Red Hat Enterprise Linux WS version 4 Extras java-1.4.2-ibm 1.4.2.9-1jpp.1.el4, java-1.5.0-ibm 1.5.0.5-1jpp.2.el4, java-1.4.2-bea 1.4.2.15-1jpp.2.el4, java-1.4.2-ibm-src 1.4.2.9-1jpp.1.el4, java-1.5.0-ibm-src 1.5.0.5-1jpp.2.el4, java-1.4.2-ibm-demo 1.4.2.9-1jpp.1.el4, +8 morefixed: vendor fix RHSA-2007:0817
show 2 moreshow fewer
-
Red Hat Satellite 5.0 (RHEL v.4 AS) jabberd 2.0s10-3.38.rhn, jfreechart 0.9.20-3.rhn, tomcat5 5.0.30-0jpp_10rh, perl-Crypt-CBC 2.24-1.el4, rhn-modperl 1.29-16.rhel4, openmotif21 2.1.30-11.RHEL4.6, +4 morefixed: vendor fix RHSA-2008:0261
-
Red Hat Satellite v 4.2 (RHEL v.3 AS) jabberd 2.0s10-3.37.rhn, jfreechart 0.9.20-3.rhn, tomcat5 5.0.30-0jpp_10rh, perl-Crypt-CBC 2.24-1.el3, rhn-modperl 1.29-16.rhel3, openmotif21 2.1.30-9.RHEL3.8, +4 more Red Hat Satellite v 4.2 (RHEL v.4 AS) jabberd 2.0s10-3.38.rhn, jfreechart 0.9.20-3.rhn, tomcat5 5.0.30-0jpp_10rh, perl-Crypt-CBC 2.24-1.el4, rhn-modperl 1.29-16.rhel4, openmotif21 2.1.30-11.RHEL4.6, +4 morefixed: vendor fix RHSA-2008:0524
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Timeline
- First public exploit (EDB-30043)
- Published
Exploit prediction
18.19% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-30043 Sun Java JDK 1.x - Multiple Vulnerabilities remote, 2007-05-16
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Classification
- Weakness
-
- CWE-189 Numeric Errors
References
-
secunia.com
/advisories/25295
patch, third-party-advisory
-
dev2dev.bea.com
/pub/advisory/248
vendor-advisory, third-party-advisory
-
sunsolve.sun.com
/search/document.do?assetkey=1-66-200856-1
vendor-advisory, broken-link
-
gentoo.org
/security/en/glsa/glsa-200705-23.xml
vendor-advisory, third-party-advisory
-
security.gentoo.org
/glsa/glsa-200804-28.xml
vendor-advisory, third-party-advisory
-
sunsolve.sun.com
/search/document.do?assetkey=1-26-102934-1
vendor-advisory, broken-link
-
novell.com
/linux/security/advisories/2007_45_java.html
vendor-advisory, third-party-advisory
-
lists.apple.com
/archives/Security-announce/2007/Dec/msg00001.html
vendor-advisory, mailing-list, third-party-advisory
-
redhat.com
/support/errata/RHSA-2008-0100.html
vendor-advisory
-
redhat.com
/support/errata/RHSA-2007-0956.html
vendor-advisory
-
redhat.com
/support/errata/RHSA-2007-0817.html
vendor-advisory
-
security.gentoo.org
/glsa/glsa-200706-08.xml
vendor-advisory, third-party-advisory
-
novell.com
/linux/security/advisories/2007_56_ibmjava.html
vendor-advisory
-
gentoo.org
/security/en/glsa/glsa-200709-15.xml
vendor-advisory, third-party-advisory
-
redhat.com
/support/errata/RHSA-2008-0261.html
vendor-advisory
-
redhat.com
/support/errata/RHSA-2007-1086.html
vendor-advisory
-
gentoo.org
/security/en/glsa/glsa-200804-20.xml
vendor-advisory, third-party-advisory
-
gentoo.org
/security/en/glsa/glsa-200806-11.xml
vendor-advisory, third-party-advisory
-
redhat.com
/support/errata/RHSA-2007-0829.html
vendor-advisory
-
redhat.com
/support/errata/RHSA-2008-0133.html
vendor-advisory
-
secunia.com
/advisories/26933
third-party-advisory
-
docs.info.apple.com
/article.html?artnum=307177
broken-link
-
lists.vmware.com
/pipermail/security-announce/2008/000003.html
mailing-list, third-party-advisory
-
secunia.com
/advisories/26049
third-party-advisory
-
secunia.com
/advisories/26311
third-party-advisory
-
attrition.org
/pipermail/vim/2007-July/001696.html
mailing-list, third-party-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/34652
vdb-entry
-
scary.beasts.org
/security/CESA-2006-004.html
third-party-advisory
-
secunia.com
/advisories/30805
third-party-advisory
-
vupen.com
/english/advisories/2008/0065
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/34318
vdb-entry
-
kb.cert.org
/vuls/id/138545
third-party-advisory, us-government-resource
-
securityfocus.com
/bid/24004
vdb-entry
-
attrition.org
/pipermail/vim/2007-December/001862.html
mailing-list, third-party-advisory
-
secunia.com
/advisories/26369
third-party-advisory
-
secunia.com
/advisories/28056
third-party-advisory
-
secunia.com
/advisories/29858
third-party-advisory
-
vupen.com
/english/advisories/2007/1836
vdb-entry
-
support.novell.com
/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html
third-party-advisory
-
secunia.com
/advisories/26645
third-party-advisory
-
secunia.com
/advisories/26119
third-party-advisory
-
secunia.com
/advisories/25474
third-party-advisory
-
secunia.com
/advisories/25832
third-party-advisory
-
secunia.com
/advisories/26631
third-party-advisory
-
secunia.com
/advisories/27203
third-party-advisory
-
secunia.com
/advisories/27266
third-party-advisory
-
secunia.com
/advisories/28115
third-party-advisory
-
secunia.com
/advisories/28365
third-party-advisory
-
secunia.com
/advisories/29340
third-party-advisory
-
secunia.com
/advisories/30780
third-party-advisory
-
support.novell.com
/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html
third-party-advisory
-
attrition.org
/pipermail/vim/2007-July/001697.html
third-party-advisory
-
attrition.org
/pipermail/vim/2007-July/001708.html
third-party-advisory
Sources
- CVE List CVE-2007-2788
- NVD CVE-2007-2788
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.