CVE:CVE-2007-3794
CNNVD:CNNVD-200707-260
Hitachi Cosminexus V4版本至V7版本中存在缓冲区溢出。XML版本之前的版本20070511的处理工具， Java 20070312版本之前的版本的开发商工具, 以及第三方产品都在使用该软件,攻击者可以借助某些GIF图像引起未知影响。且该图像与一个Java应用程序的GIF图像处理APIs的使用相关。
solution:Upgrade hitachi cosminexus_application_server to a higher version than 05_00_05_00_h,05_01_05_01_k,05_05_05_00_o,06_00_06_00_g,06_02_06_02_f,06_50_06_50_e,06_51_06_51_g,05_05_05_05_h,06_00_06_00_b,06_00_06_00_d,06_50_06_50_b,06_50_06_50_c,06_51_06_51_b,06_51_06_51_c,05_02_05_02_e,06_00_06_00_e,06_50_06_50_d,05_00_05_00_r,05_05_05_05_l,06_50_06_50_f,06_00_06_00_a,and avoid the version 05_00_05_00_h,05_01_05_01_k,05_05_05_00_o,06_00_06_00_g,06_02_06_02_f,06_50_06_50_e,06_51_06_51_g,05_05_05_05_h,06_00_06_00_b,06_00_06_00_d,06_50_06_50_b,06_50_06_50_c,06_51_06_51_b,06_51_06_51_c,05_02_05_02_e,06_00_06_00_e,06_50_06_50_d,05_00_05_00_r,05_05_05_05_l,06_50_06_50_f,06_00_06_00_a; Upgrade hitachi cosminexus_client to a higher version than 06_00_06_00_g,06_02_06_02_f,06_50_06_50_e,06_51_06_51_g,and avoid the version 06_00_06_00_g,06_02_06_02_f,06_50_06_50_e,06_51_06_51_g; Upgrade hitachi cosminexus_developer to a higher version than 05_00_05_00_h,05_01_05_01_k,05_05_05_05_o,06_00_06_00_g,06_02_06_02_f,06_50_06_50_e,06_51_06_51_g,and avoid the version 05_00_05_00_h,05_01_05_01_k,05_05_05_05_o,06_00_06_00_g,06_02_06_02_f,06_50_06_50_e,06_51_06_51_g; Upgrade hitachi cosminexus_server to a higher version than 04_00_04_00_a,04_01_04_01_a,and avoid the version 04_00_04_00_a,04_01_04_01_a; Upgrade hitachi cosminexus_studio to a higher version than 04_00_04_00_a,04_01_04_01_a,05_05_05_05_o,and avoid the version 04_00_04_00_a,04_01_04_01_a,05_05_05_05_o; Upgrade hitachi ucosminexus_application_server to a higher version than 06_70_06_70_a,06_70_06_70_b,06_71_06_71_b,07_00_07_20,07_00_07_10,06_70_06_70_h,06_70_06_72,07_10,06_70_06_70_d,06_70_06_70_c,07_00,and avoid the version 06_70_06_70_a,06_70_06_70_b,06_71_06_71_b,07_00_07_20,07_00_07_10,06_70_06_70_h,06_70_06_72,07_10,06_70_06_70_d,06_70_06_70_c,07_00; Upgrade hitachi ucosminexus_client to a higher version than 06_70_06_70_b,06_71_06_71_b,07_00_07_20,and avoid the version 06_70_06_70_b,06_71_06_71_b,07_00_07_20; Upgrade hitachi ucosminexus_developer to a higher version than 06_70_06_70_b,06_71_06_71_b,and avoid the version 06_70_06_70_b,06_71_06_71_b; Upgrade hitachi ucosminexus_operator to a higher version than 07_00_07_20,and avoid the version 07_00_07_20; Upgrade hitachi ucosminexus_service_architect to a higher version than 07_00_07_20,and avoid the version 07_00_07_20; Upgrade hitachi ucosminexus_service_platform to a higher version than 07_00_07_20,07_00_07_10,07_10,and avoid the version 07_00_07_20,07_00_07_10,07_10