← Back

CVE-2007-6721

nvd nist
Published: Mar 30, 2009Modified: Apr 23, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."

Affected (72)

2 products
Bc Java
Bouncy Castle Crypto Package
Configuration A
72 vulnerable
Vulnerable SoftwareAffected Versions
Bouncycastle
Up to 1.37
Version 1.01
Version 1.02
Version 1.03
Version 1.04
Version 1.05
Version 1.06
Version 1.07
Version 1.08
Version 1.09
Version 1.10
Version 1.11
Version 1.12
Version 1.13
Version 1.14
Version 1.15
Version 1.16
Version 1.17
Version 1.18
Version 1.19
Version 1.20
Version 1.21
Version 1.22
Version 1.23
Version 1.24
Version 1.25
Version 1.26
Version 1.27
Version 1.28
Version 1.29
Version 1.30
Version 1.31
Version 1.32
Version 1.33
Version 1.34
Version 1.35
Version 1.36
Bouncycastle
Up to 1.35
Version 1.01
Version 1.02
Version 1.03
Version 1.04
Version 1.05
Version 1.06
Version 1.07
Version 1.08
Version 1.09
Version 1.0
Version 1.11
Version 1.12
Version 1.13
Version 1.14
Version 1.15
Version 1.16
Version 1.17
Version 1.18
Version 1.19
Version 1.20
Version 1.21
Version 1.22
Version 1.23
Version 1.24
Version 1.25
Version 1.26
Version 1.27
Version 1.28
Version 1.29
Version 1.3.1
Version 1.30
Version 1.32
Version 1.33
Version 1.34

References (14)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.