Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2007-2789: Sun Java JDK/JRE BMP parser can freeze JVM

CVE-2007-2789 · published 19 years ago

Summary

The BMP image handling code in older Sun Java Development Kit and Runtime Environment versions on Unix/Linux can be tricked by a specially crafted BMP file into hanging the Java virtual machine. This means a malicious applet or program could stop Java applications from running. Update to the latest Java releases or avoid running untrusted Java applets to prevent the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
sun	jdk	1.5.0 1.6.0 `cpe:2.3:a:sun:jdk:1.5.0:-::::::`
sun	jre	1.3.1 1.3.1_2 1.3.1_03 1.3.1_04 1.3.1_05 1.3.1_06 1.3.1_07 1.3.1_08 1.3.1_09 1.3.1_10 1.3.1_11 1.3.1_12 24 more version ranges `cpe:2.3:a:sun:jre:1.3.1:-::::::`
sun	sdk	1.3.1 1.3.1_01 1.3.1_01a 1.3.1_02 1.3.1_03 1.3.1_04 1.3.1_05 1.3.1_06 1.3.1_07 1.3.1_08 1.3.1_09 1.3.1_10 24 more version ranges `cpe:2.3:a:sun:sdk:1.3.1:::::::*`

Original advisory text

The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.2_14 and earlier, and SDK and JRE 1.3.1_19 and earlier, when running on Unix/Linux systems, allows remote attackers to cause a denial of service (JVM hang) via untrusted applets or applications that open arbitrary local files via a crafted BMP file, such as /dev/tty.

References

http://dev2dev.bea.com/pub/advisory/248 Third Party Advisory
http://docs.info.apple.com/article.html?artnum=307177 Broken Link
http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html Mailing List Third Party Advisory
http://scary.beasts.org/security/CESA-2006-004.html Third Party Advisory
http://secunia.com/advisories/25295 Patch Third Party Advisory
http://secunia.com/advisories/25474 Third Party Advisory
http://secunia.com/advisories/25832 Third Party Advisory
http://secunia.com/advisories/26049 Third Party Advisory
http://secunia.com/advisories/26119 Third Party Advisory
http://secunia.com/advisories/26311 Third Party Advisory
http://secunia.com/advisories/26369 Third Party Advisory
http://secunia.com/advisories/26631 Third Party Advisory
http://secunia.com/advisories/26645 Third Party Advisory
http://secunia.com/advisories/26933 Third Party Advisory
http://secunia.com/advisories/27203 Third Party Advisory
http://secunia.com/advisories/27266 Third Party Advisory
http://secunia.com/advisories/28056 Third Party Advisory
http://secunia.com/advisories/28115 Third Party Advisory
http://secunia.com/advisories/29340 Third Party Advisory
http://secunia.com/advisories/29858 Third Party Advisory
http://secunia.com/advisories/30780 Third Party Advisory
http://secunia.com/advisories/30805 Third Party Advisory
http://security.gentoo.org/glsa/glsa-200706-08.xml Third Party Advisory
http://security.gentoo.org/glsa/glsa-200804-28.xml Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102934-1 Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200856-1 Broken Link
http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html Third Party Advisory
http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-December/001862.html Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-July/001696.html Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-July/001697.html Third Party Advisory
http://www.attrition.org/pipermail/vim/2007-July/001708.html Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200705-23.xml Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200709-15.xml Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_45_java.html Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_56_ibmjava.html Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0817.html Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0829.html Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0956.html Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-1086.html Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0100.html Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0133.html Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0261.html Third Party Advisory
http://www.securityfocus.com/bid/24004 Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1018182 Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2007/1836 Permissions Required
http://www.vupen.com/english/advisories/2007/3009 Permissions Required
http://www.vupen.com/english/advisories/2007/4224 Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/34320 Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34654 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3... Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

4.3 Medium

Exploitation

3% chance of attack within 30 days

Type

CWE-399Resource Management Errors

Timeline

Published22 May 2007

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2007-2789 · NVD

Track software like this

Free during beta