Lucene search
HistoryJun 16, 2014 - 2:55 p.m.
CVE-2014-2003
CVSS2
7.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
High
EPSS
0.035
Percentile
91.6%
JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and execute arbitrary code via a crafted signature.
Affected configurations
Node
justsystemsichitaroRange≤2014
ORjustsystemsichitaroMatch10
ORjustsystemsichitaroMatch11
ORjustsystemsichitaroMatch12
ORjustsystemsichitaroMatch13
ORjustsystemsichitaroMatch2004
ORjustsystemsichitaroMatch2005
ORjustsystemsichitaroMatch2006
ORjustsystemsichitaroMatch2006-government
ORjustsystemsichitaroMatch2007
ORjustsystemsichitaroMatch2007-government
ORjustsystemsichitaroMatch2008
ORjustsystemsichitaroMatch2008-government
ORjustsystemsichitaroMatch2009
ORjustsystemsichitaroMatch2009-government
ORjustsystemsichitaroMatch2009-trial
ORjustsystemsichitaroMatch2010
ORjustsystemsichitaroMatch2010-government
ORjustsystemsichitaroMatch2011
ORjustsystemsichitaroMatch2011-sou
ORjustsystemsichitaroMatch2012-shou
ORjustsystemsichitaroMatch2013-gen
ORjustsystemsichitaroMatch2013-gen_trial
ORjustsystemsjust_online_updateMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| justsystems | ichitaro | * | cpe:2.3:a:justsystems:ichitaro:*:*:*:*:*:*:*:* |
| justsystems | ichitaro | 10 | cpe:2.3:a:justsystems:ichitaro:10:*:*:*:*:*:*:* |
| justsystems | ichitaro | 11 | cpe:2.3:a:justsystems:ichitaro:11:*:*:*:*:*:*:* |
| justsystems | ichitaro | 12 | cpe:2.3:a:justsystems:ichitaro:12:*:*:*:*:*:*:* |
| justsystems | ichitaro | 13 | cpe:2.3:a:justsystems:ichitaro:13:*:*:*:*:*:*:* |
| justsystems | ichitaro | 2004 | cpe:2.3:a:justsystems:ichitaro:2004:*:*:*:*:*:*:* |
| justsystems | ichitaro | 2005 | cpe:2.3:a:justsystems:ichitaro:2005:*:*:*:*:*:*:* |
| justsystems | ichitaro | 2006 | cpe:2.3:a:justsystems:ichitaro:2006:*:*:*:*:*:*:* |
| justsystems | ichitaro | 2006 | cpe:2.3:a:justsystems:ichitaro:2006:-:government:*:*:*:*:* |
| justsystems | ichitaro | 2007 | cpe:2.3:a:justsystems:ichitaro:2007:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2014-2003
2014-06-16 14:00:00
prion
prion
Code injection
2014-06-16 14:55:00
jvn
jvn
cve
cve
CVE-2014-2003
2014-06-16 14:55:05
CVSS2
7.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
High
EPSS
0.035
Percentile
91.6%
Related for NVD:CVE-2014-2003