CVE-2007-3004 — IBM JDK: Integer overflow in IBM JDK's ICC profile parser

IBM JDK: Integer overflow in IBM JDK's ICC profile parser

Published Jun 4, 2007

No CVSS score

EPSS 0.23%

Description

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2788. Reason: This candidate is a duplicate of CVE-2007-2788. Notes: All CVE users should reference CVE-2007-2788 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Affected products

Red Hat Enterprise Linux 2.1

IBMJava2-JRE-1:1.3.1-17

Fixed · RHSA-2008:0133
Red Hat Enterprise Linux 2.1

IBMJava2-SDK-1:1.3.1-17

Fixed · RHSA-2008:0133

Product	Package	State	Advisory
Red Hat Enterprise Linux 2.1	IBMJava2-JRE-1:1.3.1-17	Fixed	RHSA-2008:0133
Red Hat Enterprise Linux 2.1	IBMJava2-SDK-1:1.3.1-17	Fixed	RHSA-2008:0133

Remediation

No remediation recorded yet.

Metrics

0.23% 0.00232

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Dec 12, 2024.

EPSS probability 0.00232

Score over time

Feb–Dec 2024

EPSS v3

Percentile over time

EPSS v3

Table of values (2 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Dec 12, 2024	0.23% (0.00232)	62.18th	v3 (v2023.03.01)
Feb 8, 2024	0.22% (0.00217)	58.76th	v3 (v2023.03.01)

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-190

Integer Overflow

References (4)

https://access.redhat.com/security/cve/CVE-2007-3004
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=242595
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2007-3004
https://www.cve.org/CVERecord?id=CVE-2007-3004

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2007-3004		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=242595		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2007-3004
https://www.cve.org/CVERecord?id=CVE-2007-3004