Lucene search

[email protected]CVE-2006-4326

HistoryAug 24, 2006 - 1:04 a.m.

CVE-2006-4326

2006-08-2401:04:00

CWE-119

[email protected]

web.nvd.nist.gov

vulnerability

buffer overflow

ichitaro

remote code execution

cve-2006-4326

justsystem

8.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.309 Low

EPSS

Percentile

96.9%

JSON

Stack-based buffer overflow in Justsystem Ichitaro 9.x through 13.x, Ichitaro 2004, 2005, 2006, and Government 2006; Ichitaro for Linux; and FormLiner before 20060818 allows remote attackers to execute arbitrary code via long Unicode strings in a crafted document, as being actively exploited by malware such as Trojan.Tarodrop. NOTE: some details are obtained from third party information.

CPENameOperatorVersion
justsystem:formlinerjustsystem formlinereq*
justsystem:ichitarojustsystem ichitaroeq9.0
justsystem:ichitarojustsystem ichitaroeq10.0
justsystem:ichitarojustsystem ichitaroeq11.0
justsystem:ichitarojustsystem ichitaroeq2006
justsystem:ichitaro_governmentjustsystem ichitaro governmenteq2006
justsystem:ichitarojustsystem ichitaroeq2005
justsystem:ichitarojustsystem ichitaroeq12.0
justsystem:ichitarojustsystem ichitaroeq13.0
justsystem:ichitarojustsystem ichitaroeq2004

CPE	Name	Operator	Version
justsystem:formliner	justsystem formliner	eq	*
justsystem:ichitaro	justsystem ichitaro	eq	9.0
justsystem:ichitaro	justsystem ichitaro	eq	10.0
justsystem:ichitaro	justsystem ichitaro	eq	11.0
justsystem:ichitaro	justsystem ichitaro	eq	2006
justsystem:ichitaro_government	justsystem ichitaro government	eq	2006
justsystem:ichitaro	justsystem ichitaro	eq	2005
justsystem:ichitaro	justsystem ichitaro	eq	12.0
justsystem:ichitaro	justsystem ichitaro	eq	13.0
justsystem:ichitaro	justsystem ichitaro	eq	2004

References

secunia.com/advisories/21552

www.justsystem.co.jp/info/pd6002.html

www.securityfocus.com/bid/19550

www.symantec.com/enterprise/security_response/weblog/2006/08/justsystems_ichitaro_0day_used.html

www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-081615-5201-99

www.vupen.com/english/advisories/2006/3332

exchange.xforce.ibmcloud.com/vulnerabilities/28484

8.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.309 Low

EPSS

Percentile

96.9%

JSON

Related for CVE-2006-4326

cve2 prion1