JVNDB-2012-002377

Arbitrary Code Execution Vulnerability in Hitachi COBOL GUI Option on Windows

Hitachi COBOL GUI Option on Windows contains a vulnerability where arbitrary code may be executed.

This problem does not occur when only the following runtime products are solely used.

COBOL GUI Option Run Time System Version 6
COBOL GUI Option Server Run Time System Version 6
COBOL GUI Option Run Time System Version 7
COBOL GUI Option Server Run Time System Version 7
COBOL GUI Option Run Time System
COBOL GUI Option Server Run Time System

Base Metrics: 10.0 (High) [IPA Score]

• Access Vector: Network
• Access Complexity: Low
• Authentication: None
• Confidentiality Impact: Complete
• Integrity Impact: Complete
• Availability Impact: Complete

Hitachi, Ltd

• COBOL GUI Option (Windows)
• COBOL GUI Option Server (Windows)
• COBOL GUI Option Version 6 (Windows)
• COBOL GUI Option Version 7 (Windows)
• COBOL GUI Option Server Version 7 (Windows)

Please refer to HS12-013 provided by Hitachi for more details.

A remote attacker could execute arbitrary code via unknown attack vectors.

Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action.

Hitachi, Ltd

• Hitachi Software Vulnerability Information : HS12-013

1. No Mapping(CWE-noinfo) [IPA Evaluation]

[2012/05/15]
  Web page was published