CVE-2007-0425: Buffer Overflow

Q: What is the severity of CVE-2007-0425?

CVE-2007-0425 has a high severity rating due to the potential for attackers to gain elevated privileges.

Q: How do I fix CVE-2007-0425?

To fix CVE-2007-0425, upgrade BEA WebLogic Server and JRockit to the latest patched versions provided by Oracle.

Q: Which products are affected by CVE-2007-0425?

CVE-2007-0425 affects BEA WebLogic Platform and Server 8.1 through SP5, as well as JRockit 1.4.2 R4.5 and earlier versions.

Q: What types of attacks are possible due to CVE-2007-0425?

Exploitation of CVE-2007-0425 could allow attackers to execute arbitrary code or gain unauthorized access to system resources.

Q: When was CVE-2007-0425 disclosed?

CVE-2007-0425 was disclosed in January 2007.

Published Jan 23, 2007

Updated

Unspecified vulnerability in BEA WebLogic Platform and Server 8.1 through 8.1 SP5, and JRockit 1.4.2 R4.5 and earlier, allows attackers to gain privileges via unspecified vectors, related to an "overflow condition," probably a buffer overflow.

Affected Software

3 affected components

Bea WebLogic Server<=8.1

Bea WebLogic Server=8.1

Bea JRockit<=1.4.2

Event History

Jan 23, 2007

CVE Published

12:28 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0425?

CVE-2007-0425 has a high severity rating due to the potential for attackers to gain elevated privileges.

How do I fix CVE-2007-0425?

To fix CVE-2007-0425, upgrade BEA WebLogic Server and JRockit to the latest patched versions provided by Oracle.

Which products are affected by CVE-2007-0425?

CVE-2007-0425 affects BEA WebLogic Platform and Server 8.1 through SP5, as well as JRockit 1.4.2 R4.5 and earlier versions.

What types of attacks are possible due to CVE-2007-0425?

Exploitation of CVE-2007-0425 could allow attackers to execute arbitrary code or gain unauthorized access to system resources.

When was CVE-2007-0425 disclosed?