CVE-2007-3794

Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application.

公開: 2007-07-15 最終更新: 2026-06-16 Assigner: [email protected] ソース: [email protected]

総合評価: CVE-2007-3794 は高リスク(69.7/100)。CVSS 深刻度は重大。悪用される可能性が高い(EPSS 2.19%、80 パーセンタイル) 根拠: 直近 1 日で EPSS が +1.73% 上昇。悪用への関心が高まっている可能性があります。 推奨対応: 悪用可能性が高いため、影響範囲の確認と修補の優先付けを推奨します。

リスクは変動します。再評価に基づき、本ページの表示内容を更新しています。

CVE-2007-3794 の EPSS(Exploit Prediction Scoring System)スコア

EPSS は日次で悪用されやすさの相対度合いを推定します。パーセンタイルは採点済み CVE の中での相対位置(高いほど相対的に深刻)を示します。

# 日付 旧 EPSS スコア 新 EPSS スコア Δ(新 − 旧)
1 2026-06-15 0.46% 2.19% +1.73%
2 2025-11-20 0.45% 0.46% +0.01%
3 2025-10-28 0.45%

EPSS の全履歴 (全 12 件)

CVE-2007-3794 の CVSS(Common Vulnerability Scoring System)指標

この CVE の CVSS 指標。

ベーススコア バージョン 深刻度 ベクトル 悪用しやすさ 影響 スコアの出典
10.0 2.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C クリックして展開
アクセス経路 (AV:N)
ルーティング可能なネットワーク越しに、遠隔から到達・悪用しうる。
アクセスの複雑さ (AC:L)
手順が短く、再現性が高い。
認証 (AU:N)
認証を経ずに攻撃を完結できる。
機密性への影響 (C:C)
機密性は全面的に損なわれる。
完全性への影響 (I:C)
完全性は全面的に損なわれる。
可用性への影響 (A:C)
可用性は全面的に損なわれる。
10.0 10.0 [email protected]

CVE-2007-3794 の弱点分類(列挙)

CVE-2007-3794 の影響を受けるソフトウェア/構成

ベンダー 製品 バージョン 生の CPE
hitachi cosminexus_application_server 05_00_05_00_h cpe:2.3:a:hitachi:cosminexus_application_server:05_00_05_00_h:*:*:*:*:*:*:*
hitachi cosminexus_application_server 05_01_05_01_k cpe:2.3:a:hitachi:cosminexus_application_server:05_01_05_01_k:*:*:*:*:*:*:*
hitachi cosminexus_application_server 05_05_05_00_o cpe:2.3:a:hitachi:cosminexus_application_server:05_05_05_00_o:*:*:*:*:*:*:*
hitachi cosminexus_application_server 06_00_06_00_g cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_g:*:enterprise:*:*:*:*:*
hitachi cosminexus_application_server 06_00_06_00_g cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_g:*:standard:*:*:*:*:*
hitachi cosminexus_application_server 06_02_06_02_f cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:enterprise:*:*:*:*:*
hitachi cosminexus_application_server 06_02_06_02_f cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:standard:*:*:*:*:*
hitachi cosminexus_application_server 06_50_06_50_e cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_e:*:enterprise:*:*:*:*:*
hitachi cosminexus_application_server 06_50_06_50_e cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_e:*:standard:*:*:*:*:*
hitachi cosminexus_application_server 06_51_06_51_g cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_g:*:enterprise:*:*:*:*:*
hitachi cosminexus_application_server 06_51_06_51_g cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_g:*:standard:*:*:*:*:*
hitachi cosminexus_client 06_00_06_00_g cpe:2.3:a:hitachi:cosminexus_client:06_00_06_00_g:*:*:*:*:*:*:*
hitachi cosminexus_client 06_02_06_02_f cpe:2.3:a:hitachi:cosminexus_client:06_02_06_02_f:*:*:*:*:*:*:*
hitachi cosminexus_client 06_50_06_50_e cpe:2.3:a:hitachi:cosminexus_client:06_50_06_50_e:*:*:*:*:*:*:*
hitachi cosminexus_client 06_51_06_51_g cpe:2.3:a:hitachi:cosminexus_client:06_51_06_51_g:*:*:*:*:*:*:*
hitachi cosminexus_developer 05_00_05_00_h cpe:2.3:a:hitachi:cosminexus_developer:05_00_05_00_h:*:*:*:*:*:*:*
hitachi cosminexus_developer 05_01_05_01_k cpe:2.3:a:hitachi:cosminexus_developer:05_01_05_01_k:*:*:*:*:*:*:*
hitachi cosminexus_developer 05_05_05_05_o cpe:2.3:a:hitachi:cosminexus_developer:05_05_05_05_o:*:*:*:*:*:*:*
hitachi cosminexus_developer 06_00_06_00_g cpe:2.3:a:hitachi:cosminexus_developer:06_00_06_00_g:*:light:*:*:*:*:*
hitachi cosminexus_developer 06_00_06_00_g cpe:2.3:a:hitachi:cosminexus_developer:06_00_06_00_g:*:professional:*:*:*:*:*
hitachi cosminexus_developer 06_00_06_00_g cpe:2.3:a:hitachi:cosminexus_developer:06_00_06_00_g:*:standard:*:*:*:*:*
hitachi cosminexus_developer 06_02_06_02_f cpe:2.3:a:hitachi:cosminexus_developer:06_02_06_02_f:*:light:*:*:*:*:*
hitachi cosminexus_developer 06_02_06_02_f cpe:2.3:a:hitachi:cosminexus_developer:06_02_06_02_f:*:professional:*:*:*:*:*
hitachi cosminexus_developer 06_02_06_02_f cpe:2.3:a:hitachi:cosminexus_developer:06_02_06_02_f:*:standard:*:*:*:*:*
hitachi cosminexus_developer 06_50_06_50_e cpe:2.3:a:hitachi:cosminexus_developer:06_50_06_50_e:*:light:*:*:*:*:*
hitachi cosminexus_developer 06_50_06_50_e cpe:2.3:a:hitachi:cosminexus_developer:06_50_06_50_e:*:professional:*:*:*:*:*
hitachi cosminexus_developer 06_50_06_50_e cpe:2.3:a:hitachi:cosminexus_developer:06_50_06_50_e:*:standard:*:*:*:*:*
hitachi cosminexus_developer 06_51_06_51_g cpe:2.3:a:hitachi:cosminexus_developer:06_51_06_51_g:*:light:*:*:*:*:*
hitachi cosminexus_developer 06_51_06_51_g cpe:2.3:a:hitachi:cosminexus_developer:06_51_06_51_g:*:professional:*:*:*:*:*
hitachi cosminexus_developer 06_51_06_51_g cpe:2.3:a:hitachi:cosminexus_developer:06_51_06_51_g:*:standard:*:*:*:*:*
hitachi cosminexus_server 04_00_04_00_a cpe:2.3:a:hitachi:cosminexus_server:04_00_04_00_a:*:standard:*:*:*:*:*
hitachi cosminexus_server 04_00_04_00_a cpe:2.3:a:hitachi:cosminexus_server:04_00_04_00_a:*:web:*:*:*:*:*
hitachi cosminexus_server 04_01_04_01_a cpe:2.3:a:hitachi:cosminexus_server:04_01_04_01_a:*:standard:*:*:*:*:*
hitachi cosminexus_server 04_01_04_01_a cpe:2.3:a:hitachi:cosminexus_server:04_01_04_01_a:*:web:*:*:*:*:*
hitachi cosminexus_studio 04_00_04_00_a cpe:2.3:a:hitachi:cosminexus_studio:04_00_04_00_a:*:standard:*:*:*:*:*
hitachi cosminexus_studio 04_00_04_00_a cpe:2.3:a:hitachi:cosminexus_studio:04_00_04_00_a:*:web:*:*:*:*:*
hitachi cosminexus_studio 04_01_04_01_a cpe:2.3:a:hitachi:cosminexus_studio:04_01_04_01_a:*:standard:*:*:*:*:*
hitachi cosminexus_studio 04_01_04_01_a cpe:2.3:a:hitachi:cosminexus_studio:04_01_04_01_a:*:web:*:*:*:*:*
hitachi cosminexus_studio 05_05_05_05_o cpe:2.3:a:hitachi:cosminexus_studio:05_05_05_05_o:*:*:*:*:*:*:*
hitachi ucosminexus_application_server 06_70_06_70_a cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_a:*:enterprise:*:*:*:*:*
hitachi ucosminexus_application_server 06_70_06_70_a cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_a:*:standard:*:*:*:*:*
hitachi ucosminexus_application_server 06_70_06_70_b cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_b:*:enterprise:*:*:*:*:*
hitachi ucosminexus_application_server 06_70_06_70_b cpe:2.3:a:hitachi:ucosminexus_application_server:06_70_06_70_b:*:standard:*:*:*:*:*
hitachi ucosminexus_application_server 06_71_06_71_b cpe:2.3:a:hitachi:ucosminexus_application_server:06_71_06_71_b:*:enterprise:*:*:*:*:*
hitachi ucosminexus_application_server 06_71_06_71_b cpe:2.3:a:hitachi:ucosminexus_application_server:06_71_06_71_b:*:standard:*:*:*:*:*
hitachi ucosminexus_application_server 07_00_07_20 cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_20:*:enterprise:*:*:*:*:*
hitachi ucosminexus_application_server 07_00_07_20 cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_20:*:standard:*:*:*:*:*
hitachi ucosminexus_client 06_70_06_70_b cpe:2.3:a:hitachi:ucosminexus_client:06_70_06_70_b:*:*:*:*:*:*:*
hitachi ucosminexus_client 06_71_06_71_b cpe:2.3:a:hitachi:ucosminexus_client:06_71_06_71_b:*:*:*:*:*:*:*
hitachi ucosminexus_client 07_00_07_20 cpe:2.3:a:hitachi:ucosminexus_client:07_00_07_20:*:*:*:*:*:*:*
hitachi ucosminexus_developer 06_70_06_70_b cpe:2.3:a:hitachi:ucosminexus_developer:06_70_06_70_b:*:light:*:*:*:*:*
hitachi ucosminexus_developer 06_70_06_70_b cpe:2.3:a:hitachi:ucosminexus_developer:06_70_06_70_b:*:professional:*:*:*:*:*
hitachi ucosminexus_developer 06_70_06_70_b cpe:2.3:a:hitachi:ucosminexus_developer:06_70_06_70_b:*:standard:*:*:*:*:*
hitachi ucosminexus_developer 06_71_06_71_b cpe:2.3:a:hitachi:ucosminexus_developer:06_71_06_71_b:*:light:*:*:*:*:*
hitachi ucosminexus_developer 06_71_06_71_b cpe:2.3:a:hitachi:ucosminexus_developer:06_71_06_71_b:*:professional:*:*:*:*:*
hitachi ucosminexus_developer 06_71_06_71_b cpe:2.3:a:hitachi:ucosminexus_developer:06_71_06_71_b:*:standard:*:*:*:*:*
hitachi ucosminexus_operator 07_00_07_20 cpe:2.3:a:hitachi:ucosminexus_operator:07_00_07_20:*:*:*:*:*:*:*
hitachi ucosminexus_service_architect 07_00_07_20 cpe:2.3:a:hitachi:ucosminexus_service_architect:07_00_07_20:*:*:*:*:*:*:*
hitachi ucosminexus_service_platform 07_00_07_20 cpe:2.3:a:hitachi:ucosminexus_service_platform:07_00_07_20:*:*:*:*:*:*:*
hitachi cosminexus_application_server 05_05_05_05_h cpe:2.3:a:hitachi:cosminexus_application_server:05_05_05_05_h:*:*:*:*:*:*:*
hitachi cosminexus_application_server 06_00_06_00_b cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_b:*:enterprise:*:*:*:*:*
hitachi cosminexus_application_server 06_00_06_00_b cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_b:*:standard:*:*:*:*:*
hitachi cosminexus_application_server 06_00_06_00_d cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_d:*:*:*:*:*:*:*
hitachi cosminexus_application_server 06_02_06_02_f cpe:2.3:a:hitachi:cosminexus_application_server:06_02_06_02_f:*:*:*:*:*:*:*
hitachi cosminexus_application_server 06_50_06_50_b cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_b:*:enterprise:*:*:*:*:*
hitachi cosminexus_application_server 06_50_06_50_b cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_b:*:standard:*:*:*:*:*
hitachi cosminexus_application_server 06_50_06_50_c cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_c:*:*:*:*:*:*:*
hitachi cosminexus_application_server 06_51_06_51_b cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_b:*:*:*:*:*:*:*
hitachi cosminexus_application_server 06_51_06_51_b cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_b:*:enterprise:*:*:*:*:*
hitachi cosminexus_application_server 06_51_06_51_b cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_b:*:standard:*:*:*:*:*
hitachi cosminexus_application_server 06_51_06_51_c cpe:2.3:a:hitachi:cosminexus_application_server:06_51_06_51_c:*:*:*:*:*:*:*
hitachi ucosminexus_application_server 07_00_07_10 cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_10:*:enterprise:*:*:*:*:*
hitachi ucosminexus_application_server 07_00_07_10 cpe:2.3:a:hitachi:ucosminexus_application_server:07_00_07_10:*:standard:*:*:*:*:*
hitachi ucosminexus_service_platform 07_00_07_10 cpe:2.3:a:hitachi:ucosminexus_service_platform:07_00_07_10:*:*:*:*:*:*:*
hitachi cosminexus_application_server 05_02_05_02_e cpe:2.3:a:hitachi:cosminexus_application_server:05_02_05_02_e:*:*:*:*:*:*:*
hitachi cosminexus_application_server 06_00_06_00_d cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_d:*:enterprise:*:*:*:*:*
hitachi cosminexus_application_server 06_00_06_00_d cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_d:*:standard:*:*:*:*:*
hitachi cosminexus_application_server 06_00_06_00_e cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_e:*:enterprise:*:*:*:*:*
hitachi cosminexus_application_server 06_00_06_00_e cpe:2.3:a:hitachi:cosminexus_application_server:06_00_06_00_e:*:standard:*:*:*:*:*
hitachi cosminexus_application_server 06_50_06_50_d cpe:2.3:a:hitachi:cosminexus_application_server:06_50_06_50_d:*:enterprise:*:*:*:*:*

CVE-2007-3794 の参考情報

cvelogic Threat Intelligence