Skip to content
Fencer Vulns
medium 6.8

CVE-2007-0243 json

Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1…

published 2007-01-17 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-0245

cvss
6.8
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
11.6%
EPSS 11.6% chance of exploitation in 30 days, percentile 96%
public exploits
1
Exploit-DB

Summary

Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption.

Patch / fix

  • jabberd network satellite 4.2 2.0s10-3.37.rhn
  • jabberd network satellite 5.0, network satellite 4.2 2.0s10-3.38.rhn
  • tomcat5 network satellite 5.0, network satellite 4.2 5.0.30-0jpp_10rh
  • jfreechart network satellite 5.0, network satellite 4.2 0.9.20-3.rhn
  • rhn-apache network satellite 4.2 1.3.27-36.rhn.rhel3
  • rhn-apache network satellite 5.0, network satellite 4.2 1.3.27-36.rhn.rhel4
  • rhn-modssl network satellite 4.2 2.8.12-8.rhn.10.rhel3
  • rhn-modssl network satellite 5.0, network satellite 4.2 2.8.12-8.rhn.10.rhel4

red hat advisories RHSA-2008:0524RHSA-2008:0261RHSA-2007:0166RHSA-2007:0956RHSA-2007:0072RHSA-2007:0167

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2007-0243 updated

java-jre: GIF buffer overflow

  • Red Hat Desktop version 3 Extras java-1.4.2-ibm 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-src 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-demo 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-jdbc 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-plugin 1.4.2.8-1jpp.1.el3 Red Hat Desktop version 4 Extras java-1.4.2-ibm 1.4.2.8-1jpp.1.el4, java-1.5.0-ibm 1.5.0.4-1jpp.3.el4, java-1.4.2-ibm-src 1.4.2.8-1jpp.1.el4, java-1.5.0-ibm-src 1.5.0.4-1jpp.3.el4, java-1.4.2-ibm-demo 1.4.2.8-1jpp.1.el4, java-1.4.2-ibm-jdbc 1.4.2.8-1jpp.1.el4, +6 more Red Hat Enterprise Linux AS version 3 Extras java-1.4.2-ibm 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-src 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-demo 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-jdbc 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-plugin 1.4.2.8-1jpp.1.el3 Red Hat Enterprise Linux AS version 4 Extras java-1.4.2-ibm 1.4.2.8-1jpp.1.el4, java-1.5.0-ibm 1.5.0.4-1jpp.3.el4, java-1.4.2-ibm-src 1.4.2.8-1jpp.1.el4, java-1.5.0-ibm-src 1.5.0.4-1jpp.3.el4, java-1.4.2-ibm-demo 1.4.2.8-1jpp.1.el4, java-1.4.2-ibm-jdbc 1.4.2.8-1jpp.1.el4, +6 more Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.4.2-ibm 1.4.2.8-1jpp.1.el5, java-1.5.0-ibm 1.5.0.4-1jpp.3.el5, java-1.4.2-ibm-src 1.4.2.8-1jpp.1.el5, java-1.5.0-ibm-src 1.5.0.4-1jpp.3.el5, java-1.4.2-ibm-demo 1.4.2.8-1jpp.1.el5, java-1.4.2-ibm-jdbc 1.4.2.8-1jpp.1.el5, +6 more Red Hat Enterprise Linux ES version 3 Extras java-1.4.2-ibm 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-src 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-demo 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-jdbc 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-plugin 1.4.2.8-1jpp.1.el3
    +4 more products
    Red Hat Enterprise Linux ES version 4 Extras java-1.4.2-ibm 1.4.2.8-1jpp.1.el4, java-1.5.0-ibm 1.5.0.4-1jpp.3.el4, java-1.4.2-ibm-src 1.4.2.8-1jpp.1.el4, java-1.5.0-ibm-src 1.5.0.4-1jpp.3.el4, java-1.4.2-ibm-demo 1.4.2.8-1jpp.1.el4, java-1.4.2-ibm-jdbc 1.4.2.8-1jpp.1.el4, +6 more Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.4.2-ibm 1.4.2.8-1jpp.1.el5, java-1.5.0-ibm 1.5.0.4-1jpp.3.el5, java-1.5.0-bea 1.5.0.11-1jpp.1.el5, java-1.4.2-ibm-src 1.4.2.8-1jpp.1.el5, java-1.5.0-ibm-src 1.5.0.4-1jpp.3.el5, java-1.4.2-ibm-demo 1.4.2.8-1jpp.1.el5, +11 more Red Hat Enterprise Linux WS version 3 Extras java-1.4.2-ibm 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-src 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-demo 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-jdbc 1.4.2.8-1jpp.1.el3, java-1.4.2-ibm-plugin 1.4.2.8-1jpp.1.el3 Red Hat Enterprise Linux WS version 4 Extras java-1.4.2-ibm 1.4.2.8-1jpp.1.el4, java-1.5.0-ibm 1.5.0.4-1jpp.3.el4, java-1.4.2-ibm-src 1.4.2.8-1jpp.1.el4, java-1.5.0-ibm-src 1.5.0.4-1jpp.3.el4, java-1.4.2-ibm-demo 1.4.2.8-1jpp.1.el4, java-1.4.2-ibm-jdbc 1.4.2.8-1jpp.1.el4, +6 more
    fixed: vendor fix RHSA-2007:0166
  • Red Hat Satellite 5.0 (RHEL v.4 AS) jabberd 2.0s10-3.38.rhn, jfreechart 0.9.20-3.rhn, tomcat5 5.0.30-0jpp_10rh, perl-Crypt-CBC 2.24-1.el4, rhn-modperl 1.29-16.rhel4, openmotif21 2.1.30-11.RHEL4.6, +4 more
    fixed: vendor fix RHSA-2008:0261
  • Red Hat Satellite v 4.2 (RHEL v.3 AS) jabberd 2.0s10-3.37.rhn, jfreechart 0.9.20-3.rhn, tomcat5 5.0.30-0jpp_10rh, perl-Crypt-CBC 2.24-1.el3, rhn-modperl 1.29-16.rhel3, openmotif21 2.1.30-9.RHEL3.8, +4 more Red Hat Satellite v 4.2 (RHEL v.4 AS) jabberd 2.0s10-3.38.rhn, jfreechart 0.9.20-3.rhn, tomcat5 5.0.30-0jpp_10rh, perl-Crypt-CBC 2.24-1.el4, rhn-modperl 1.29-16.rhel4, openmotif21 2.1.30-11.RHEL4.6, +4 more
    fixed: vendor fix RHSA-2008:0524

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. Published
  2. First public exploit (EDB-3168)

Exploit prediction

11.62% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-3168 Sun Microsystems Java - '.GIF' File Parsing Memory Corruption remote, 2007-01-21

CVSS scores

assigned by version score vector
NVD 2.0 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.