[email protected]CVE-2008-0223

HistoryJan 10, 2008 - 11:46 p.m.

CVE-2008-0223

2008-01-1023:46:00

CWE-119

[email protected]

web.nvd.nist.gov

justsystems

jsfc.dll

buffer overflow

remote code execution

security vulnerability

nvd

8.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.191 Low

EPSS

Percentile

96.3%

JSON

Buffer overflow in JustSystems JSFC.DLL, as used in multiple JustSystems products such as Ichitaro, allows remote attackers to execute arbitrary code via a crafted .JTD file.

CPENameOperatorVersion
justsystem:ichitarojustsystem ichitaroeqlinux
justsystem:ichitarojustsystem ichitaroeq2007
justsystem:ichitaro_viewerjustsystem ichitaro viewereq*
justsystem:ichitarojustsystem ichitaroeq11.0
justsystem:ichitarojustsystem ichitaroeq2006
justsystem:ichitarojustsystem ichitaroeq2005
justsystem:ichitarojustsystem ichitaroeq12.0
justsystem:ichitaro_lite2justsystem ichitaro lite2eq*
justsystem:ichitarojustsystem ichitaroeq13.0
justsystem:ichitarojustsystem ichitaroeq2004

CPE	Name	Operator	Version
justsystem:ichitaro	justsystem ichitaro	eq	linux
justsystem:ichitaro	justsystem ichitaro	eq	2007
justsystem:ichitaro_viewer	justsystem ichitaro viewer	eq	*
justsystem:ichitaro	justsystem ichitaro	eq	11.0
justsystem:ichitaro	justsystem ichitaro	eq	2006
justsystem:ichitaro	justsystem ichitaro	eq	2005
justsystem:ichitaro	justsystem ichitaro	eq	12.0
justsystem:ichitaro_lite2	justsystem ichitaro lite2	eq	*
justsystem:ichitaro	justsystem ichitaro	eq	13.0
justsystem:ichitaro	justsystem ichitaro	eq	2004

References

jvn.jp/jp/JVN%2308237857/index.html

secunia.com/advisories/28275

www.fourteenforty.jp/research/advisory.cgi?FFRRA-20080107

www.justsystems.com/jp/info/pd8001.html

www.securityfocus.com/bid/27153

www.securitytracker.com/id?1019168

www.vupen.com/english/advisories/2008/0045

exchange.xforce.ibmcloud.com/vulnerabilities/39501

8.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.191 Low

EPSS

Percentile

96.3%

JSON

Related for CVE-2008-0223

prion1 cvelist1