Lucene search

K
freebsdFreeBSD972837FC-C304-11E3-8758-00262D5ED8EE
HistoryNov 08, 2011 - 12:00 a.m.

ChaSen -- buffer overflow

2011-11-0800:00:00
vuxml.freebsd.org
8

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.073 Low

EPSS

Percentile

94.1%

JVN iPedia reports:

ChaSen provided by Nara Institute of Science and Technology is a
software for morphologically analyzing Japanese. ChaSen contains an
issue when reading in strings, which may lead to a buffer
overflow.
An arbitrary script may be executed by an attacker with access to
a system that is running a product listed in “Products
Affected.”

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchchasen-base< 2.4.5UNKNOWN
FreeBSDanynoarchchasen< 2.4.5UNKNOWN

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.073 Low

EPSS

Percentile

94.1%