JVNDB-2010-000052

Ichitaro series vulnerable to arbitrary code execution

The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution.

This vulnerability differs from JVN#01948274, and other issues that were previously published on JVN.

Base Metrics: 9.3 (High) [IPA Score]

• Access Vector: Network
• Access Complexity: Medium
• Authentication: None
• Confidentiality Impact: Complete
• Integrity Impact: Complete
• Availability Impact: Complete

JustSystems Corporation

• Ichitaro
• Ichitaro Government

When opening a specially crafted file locally or through a website, an attacker may be able to execute arbitrary code.

[Update the Software]
Update to the latest version according to the information provided by the developer.

JustSystems Corporation

• JUST SYSTEM : JS10003 (Japanese)

1. No Mapping(CWE-noinfo) [IPA Evaluation]

1. CVE-2010-3915

1. JVN : JVN#19173793
2. National Vulnerability Database (NVD) : CVE-2010-3915
3. IPA SECURITY ALERTS : Security Alert for Vulnerability in the Ichitaro Series
4. Secunia Advisory : SA42099
5. SecurityFocus : 44637
6. VUPEN Security : VUPEN/ADV-2010-2885

[2010/11/04]
  Web page published
[2010/11/05]
  CVSS Severity: Modified according to vendor announce