JVNDB-2007-000878

Ichitaro series buffer overflow vulnerability

The "Ichitaro" series word processing software contains a buffer overflow vulnerability. This vulnerability is different from JVN#29211062 and JVN#32981509.

The "Ichitaro" series word processing software, from JustSystems Corporation, contains a buffer overflow vulnerability. If a user opens a specially crafted jtd file or views it on a web browser, an attacker could execute arbitrary code with the privileges of the user.

Base Metrics: 6.8 (Medium) [IPA Score]

• Access Vector: Network
• Access Complexity: Medium
• Authentication: None
• Confidentiality Impact: Partial
• Integrity Impact: Partial
• Availability Impact: Partial

JustSystems Corporation

• Ichitaro 11
• Ichitaro 12
• Ichitaro 13
• Ichitaro 2004
• Ichitaro 2005
• Ichitaro 2006
• Ichitaro 2007
• Ichitaro for Linux
• Ichitaro Lite2
• Ichitaro 2007 trial version
• Ichitaro Government 2006
• Ichitaro Government 2007
• Ichitaro Viewer
• Ichitaro Bungei

An attacker could execute arbitrary code with the privileges of the user who opened the specially crafted jtd file.

Update the Software

Apply the update module provided by JustSystems.

JustSystems Corporation

• JUST SYSTEM : pd7004

1. Buffer Errors(CWE-119) [NVD Evaluation]

1. CVE-2007-5687

1. JVN : JVN#50495547
2. National Vulnerability Database (NVD) : CVE-2007-5687
3. Secunia Advisory : SA27393
4. SecurityFocus : 26206
5. FrSIRT Advisories : FrSIRT/ADV-2007-3623

[2008/05/21]
  Web page published