CVE:CVE-2009-4776
CNNVD:CNNVD-201004-348
Hitachi uCosminexus是一种应用服务器系统。
Hitachi Cosminexus Application Server 是针对多个平台的应用程序服务器。
uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition等产品使用的Hitachi Cosminexus, XML Processing Kit, 和Java Developer's Kit存在缓冲区溢出，远程攻击者可通过利用Java进行GIF图像处理的API造成未知影响。
solution:Upgrade hitachi ucosminexus/opentp1_web_web_front-endset to a higher version than 02-70,02-70-/a,and avoid the version 02-70,02-70-/a; Upgrade hitachi ucosminexus_application_server to a higher version than 06-70,06-70-/a,06-70-/e,06-70-/f,06-70-/g,06-70-/l,06-70-/n,06-70f,06-71,06-71-/f,06-71-/g,06-72,06-72-/d,6.7,7,07-00,07-10,07-60,8,08-00,and avoid the version 06-70,06-70-/a,06-70-/e,06-70-/f,06-70-/g,06-70-/l,06-70-/n,06-70f,06-71,06-71-/f,06-71-/g,06-72,06-72-/d,6.7,7,07-00,07-10,07-60,8,08-00; Upgrade hitachi ucosminexus_client to a higher version than 06-70,06-70-/f,06-71,06-71-/f,07-00,07-60,8,08-00,and avoid the version 06-70,06-70-/f,06-71,06-71-/f,07-00,07-60,8,08-00; Upgrade hitachi ucosminexus_collaboration to a higher version than 06-20,06-20-/d,06-30,06-30-/f,06-35,06-35-/f,and avoid the version 06-20,06-20-/d,06-30,06-30-/f,06-35,06-35-/f; Upgrade hitachi ucosminexus_developer to a higher version than 6,06-70,06-70-/f,06-71,06-71-/f,6.7,7,07-00,07-60,8,08-00,and avoid the version 6,06-70,06-70-/f,06-71,06-71-/f,6.7,7,07-00,07-60,8,08-00; Upgrade hitachi ucosminexus_operator to a higher version than 6.7,7,07-00,07-60,8,and avoid the version 6.7,7,07-00,07-60,8; Upgrade hitachi ucosminexus_service_architect to a higher version than 6.7,7,07-00,07-60,8,08-00,and avoid the version 6.7,7,07-00,07-60,8,08-00; Upgrade hitachi ucosminexus_service_platform to a higher version than 6.7,7,07-00,07-10,07-60,8,08-00,and avoid the version 6.7,7,07-00,07-10,07-60,8,08-00; Upgrade hitachi processing_kit_for_xml to a higher version than 01-00,01-05,01-05-/a,01-05-/b,01-05-/c,01-05-/d,01-07,01-07-/a,02-00,02-00-/b,02-00-/c,02-00-/d,02-05,02-05-/a,02-05-/c,and avoid the version 01-00,01-05,01-05-/a,01-05-/b,01-05-/c,01-05-/d,01-07,01-07-/a,02-00,02-00-/b,02-00-/c,02-00-/d,02-05,02-05-/a,02-05-/c; Upgrade hitachi ibm_xl_c/c++_v7_for_aix_&_hitachi_developer's_kit_for_java to a higher version than 01-00,and avoid the version 01-00; Upgrade hitachi ibm_xl_c/c++_v8_for_aix_&_hitachi_developer's_kit_for_java to a higher version than 01-00,and avoid the version 01-00; Upgrade hitachi groupmax_collaboration to a higher version than 07-20,07-20-/d,07-30,07-30-/f,07-35,07-35-/f,and avoid the version 07-20,07-20-/d,07-30,07-30-/f,07-35,07-35-/f; Upgrade hitachi electronic_form_workflow_set to a higher version than 07-50,07-50-/d,07-60,07-60-/i,and avoid the version 07-50,07-50-/d,07-60,07-60-/i; Upgrade hitachi electronic_form_workflow-standard_set to a higher version than 06-70,06-70-/c,06-70-/f,07-00,07-00-/b,07-00-/c,07-10,07-10-/a,07-11,07-11-/c,07-20,07-20-/b,and avoid the version 06-70,06-70-/c,06-70-/f,07-00,07-00-/b,07-00-/c,07-10,07-10-/a,07-11,07-11-/c,07-20,07-20-/b; Upgrade hitachi electronic_form_workflow-professional_set to a higher version than 07-50,07-50-/d,and avoid the version 07-50,07-50-/d; Upgrade hitachi electronic_form_workflow-professional_library_set to a higher version than 06-70,06-70-/c,06-70-/f,07-00,07-00-/b,07-00-/c,07-10,07-10-/a,07-11,07-11-/c,07-20,07-20-/b,and avoid the version 06-70,06-70-/c,06-70-/f,07-00,07-00-/b,07-00-/c,07-10,07-10-/a,07-11,07-11-/c,07-20,07-20-/b; Upgrade hitachi electronic_form_workflow-developer_set to a higher version than 07-50,07-50-/d,07-60,07-60-/i,and avoid the version 07-50,07-50-/d,07-60,07-60-/i; Upgrade hitachi electronic_form_workflow-developer_client_set to a higher version than 06-70,06-70-/f,07-00,07-00-/c,07-10,07-10-/a,07-11,07-11-/c,07-20,07-20-/b,and avoid the version 06-70,06-70-/f,07-00,07-00-/c,07-10,07-10-/a,07-11,07-11-/c,07-20,07-20-/b; Upgrade hitachi developer's_kit_for_java to a higher version than *; Upgrade hitachi cosminexus/opentp1_web_web_front-endset to a higher version than 01-00,01-00-/b,01-01,01-01-/c,02-00,02-00-/a,02-50,02-50-/a,and avoid the version 01-00,01-00-/b,01-01,01-01-/c,02-00,02-00-/a,02-50,02-50-/a; Upgrade hitachi cosminexus_application_server to a higher version than 5,05-00,05-00-/i,05-00-/s,05-01,05-01-/l,05-02,05-02-/e,05-05,05-05-/i,05-05-/o,05-05-/p,6,06-00,06-00-/a,06-00-/b,06-00-/e,06-00-/i,06-02,06-02-/d,06-02-/f,06-02-/g,06-50,06-50-/b,06-50-/c,06-50-/e,06-50-/f,06-50-/i,06-51,06-51-/b,06-51-/e,06-51-/k,and avoid the version 5,05-00,05-00-/i,05-00-/s,05-01,05-01-/l,05-02,05-02-/e,05-05,05-05-/i,05-05-/o,05-05-/p,6,06-00,06-00-/a,06-00-/b,06-00-/e,06-00-/i,06-02,06-02-/d,06-02-/f,06-02-/g,06-50,06-50-/b,06-50-/c,06-50-/e,06-50-/f,06-50-/i,06-51,06-51-/b,06-51-/e,06-51-/k; Upgrade hitachi cosminexus_client to a higher version than 06-00,06-00-/i,06-02,06-02-/g,06-50,06-50-/f,06-51,06-51-/k,and avoid the version 06-00,06-00-/i,06-02,06-02-/g,06-50,06-50-/f,06-51,06-51-/k; Upgrade hitachi cosminexus_studio to a higher version than 04-00,04-00-/a,04-01,04-01-/a,05-00,05-00-/i,05-01,05-01-/l,05-05,05-05-/p,and avoid the version 04-00,04-00-/a,04-01,04-01-/a,05-00,05-00-/i,05-01,05-01-/l,05-05,05-05-/p; Upgrade hitachi cosminexus_server to a higher version than 04-00,04-00-/a,04-01,04-01-/a,and avoid the version 04-00,04-00-/a,04-01,04-01-/a; Upgrade hitachi cosminexus_developer to a higher version than 5,05-00,05-00-/i,05-01,05-01-/l,05-05,05-05-/p,6,06-00,06-00-/i,06-02,06-02-/g,06-50,06-50-/f,06-51,06-51-/k,and avoid the version 5,05-00,05-00-/i,05-01,05-01-/l,05-05,05-05-/p,6,06-00,06-00-/i,06-02,06-02-/g,06-50,06-50-/f,06-51,06-51-/k