Lucene search

K
jvnJapan Vulnerability NotesJVN:16318793
HistoryNov 13, 2014 - 12:00 a.m.

JVN#16318793: Ichitaro series vulnerable to arbitrary code execution

2014-11-1300:00:00
Japan Vulnerability Notes
jvn.jp
11

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.027 Low

EPSS

Percentile

90.4%

The “Ichitaro” series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution.
For more information, please refer to the developer’s website.

Impact

When a user opens a specially crafted file, arbitrary code may be executed.

Solution

Update the software
Apply the appropriate update module according to the information provided by the developer.

Products Affected

  • Ichitaro 2014 Tetsu
  • Ichitaro 2014 Tetsu Trial Edition
  • Ichitaro 2013 Gen
  • Ichitaro 2012 Shou
  • Ichitaro 2011 Sou / Ichitaro 2011
  • Ichitaro Pro 2
  • Ichitaro Pro 2 Trial Edition
  • Ichitaro Pro
  • Ichitaro Government 7
  • Ichitaro Government 6
  • Ichitaro 2010, Ichitaro Government 2010
  • Ichitaro 2009, Ichitaro Government 2009
  • Ichitaro 2008, Ichitaro Government 2008

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.027 Low

EPSS

Percentile

90.4%