CyberSec.Space Logo
Back to CVE Browser

CVE-2007-6721

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0470%
EPSS Percentile8.95th
PublishedMar 30, 2009
Last ModifiedApr 23, 2026

Vulnerability Description

The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."

Affected Platforms (CPE)

📦
Bouncycastle

Bc Java

<= 1.37
📦
Bouncycastle

Bc Java

= 1.01
📦
Bouncycastle

Bc Java

= 1.02
📦
Bouncycastle

Bc Java

= 1.03
📦
Bouncycastle

Bc Java

= 1.04
📦
Bouncycastle

Bc Java

= 1.05
📦
Bouncycastle

Bc Java

= 1.06
📦
Bouncycastle

Bc Java

= 1.07
📦
Bouncycastle

Bc Java

= 1.08
📦
Bouncycastle

Bc Java

= 1.09
📦
Bouncycastle

Bc Java

= 1.10
📦
Bouncycastle

Bc Java

= 1.11
📦
Bouncycastle

Bc Java

= 1.12
📦
Bouncycastle

Bc Java

= 1.13
📦
Bouncycastle

Bc Java

= 1.14
📦
Bouncycastle

Bc Java

= 1.15
📦
Bouncycastle

Bc Java

= 1.16
📦
Bouncycastle

Bc Java

= 1.17
📦
Bouncycastle

Bc Java

= 1.18
📦
Bouncycastle

Bc Java

= 1.19
📦
Bouncycastle

Bc Java

= 1.20
📦
Bouncycastle

Bc Java

= 1.21
📦
Bouncycastle

Bc Java

= 1.22
📦
Bouncycastle

Bc Java

= 1.23
📦
Bouncycastle

Bc Java

= 1.24
📦
Bouncycastle

Bc Java

= 1.25
📦
Bouncycastle

Bc Java

= 1.26
📦
Bouncycastle

Bc Java

= 1.27
📦
Bouncycastle

Bc Java

= 1.28
📦
Bouncycastle

Bc Java

= 1.29
📦
Bouncycastle

Bc Java

= 1.30
📦
Bouncycastle

Bc Java

= 1.31
📦
Bouncycastle

Bc Java

= 1.32
📦
Bouncycastle

Bc Java

= 1.33
📦
Bouncycastle

Bc Java

= 1.34
📦
Bouncycastle

Bc Java

= 1.35
📦
Bouncycastle

Bc Java

= 1.36
📦
Bouncycastle

Bouncy Castle Crypto Package

<= 1.35
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.0
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.01
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.02
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.03
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.3.1
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.04
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.05
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.06
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.07
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.08
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.09
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.11
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.12
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.13
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.14
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.15
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.16
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.17
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.18
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.19
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.20
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.21
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.22
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.23
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.24
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.25
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.26
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.27
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.28
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.29
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.30
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.32
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.33
📦
Bouncycastle

Bouncy Castle Crypto Package

= 1.34

References & Advisories

🔗 http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580
🔗 http://www.bouncycastle.org/csharp/
🔗 http://www.bouncycastle.org/devmailarchive/msg08195.html
🔗 http://www.bouncycastle.org/releasenotes.html
🔗 http://www.osvdb.org/50358
🔗 http://www.osvdb.org/50359
🔗 http://www.osvdb.org/50360
🔗 http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580

Related Vulnerabilities

CVE-2018-666710.0

Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remo...

CVE-2019-1858010.0

Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerability. A rem...

CVE-2017-1281510.0

Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path trave...

CVE-2019-1981010.0

Zoom Call Recording 6.3.1 from Eleveo is vulnerable to Java Deserialization attacks targeting the inbuilt RMI service. A remote un...