Lucene search

K
jvnJapan Vulnerability NotesJVN:95378720
HistoryApr 24, 2012 - 12:00 a.m.

JVN#95378720: Multiple JustSystems products may insecurely load dynamic libraries

2012-04-2400:00:00
Japan Vulnerability Notes
jvn.jp
19

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

Multiple JustSystems products contain an issue with the DLL search path, which may lead to insecurely loading dynamic libraries.

Impact

Arbitrary code may be executed with the privileges of the running application.

Solution

Update the software
Apply the appropriate update according to the information provided by the developer.

Products Affected

  • Ichitaro 2011 Sou
  • Ichitaro 2011/2010/2009/2008/2007/2006
  • Ichitaro Government 2010/2009/2008/2007/2006
  • Ichitaro Portable with oreplug
  • Ichitaro Viewer
  • JUST School 2010/2009
  • JUST School
  • JUST Jump 4
  • JUST Frontier
  • oreplug

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

Related for JVN:95378720