| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
| CVE-2010-1424 | 15 Apr 201021:12 | – | cve | |
| CVE-2010-1424 | 15 Apr 201021:12 | – | cvelist | |
| EUVD-2010-1452 | 7 Oct 202500:30 | – | euvd | |
| JVN#98467259 Ichitaro series vulnerable to arbitrary code execution | 12 Apr 201000:00 | – | jvn | |
| Ichitaro series vulnerable to arbitrary code execution | 12 Apr 201008:17 | – | jvn | |
| CVE-2010-1424 | 15 Apr 201021:30 | – | nvd | |
| JustSystems Ichitaro Unspecified Vulnerability | 23 Apr 201000:00 | – | openvas | |
| Code injection | 15 Apr 201021:30 | – | prion | |
| CVE-2010-1424 | 22 May 202501:10 | – | redhatcve | |
| VulnCheck KEV: CVE-2010-1424 | 1 May 202000:00 | – | vulncheck_kev |
| Source | Link |
|---|---|
| securitytracker | www.securitytracker.com/alerts/2010/Apr/1023844.html |
| vupen | www.vupen.com/english/advisories/2010/0854 |
| secunia | www.secunia.com/advisories/39256 |
###############################################################################
# OpenVAS Vulnerability Test
# $Id: secpod_justsystems_ichitaro_unspecified_vuln.nasl 5394 2017-02-22 09:22:42Z teissa $
#
# JustSystems Ichitaro Unspecified Vulnerability
#
# Authors:
# Madhuri D <[email protected]>
#
# Copyright:
# Copyright (c) 2010 SecPod, http://www.secpod.com
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################
tag_impact = "Successful exploitation will let attackers to execute arbitrary commands by
tricking a user into opening a specially crafted document.
Impact Level: Application";
tag_affected = "JustSystems Ichitaro 2006 through 2010";
tag_insight = "The flaw is due to an unspecified error when processing font information
in documents and can be exploited to potentially execute arbitrary code.";
tag_solution = "Upgrade to the fixed version
http://www.justsystems.com/jp/info/js10001.html";
tag_summary = "This host is installed JustSystems Ichitaro and is prone to
unspecified vulnerability";
if(description)
{
script_id(902042);
script_version("$Revision: 5394 $");
script_tag(name:"last_modification", value:"$Date: 2017-02-22 10:22:42 +0100 (Wed, 22 Feb 2017) $");
script_tag(name:"creation_date", value:"2010-04-23 17:57:39 +0200 (Fri, 23 Apr 2010)");
script_cve_id("CVE-2010-1424");
script_tag(name:"cvss_base", value:"9.3");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:C/I:C/A:C");
script_name("JustSystems Ichitaro Unspecified Vulnerability");
script_xref(name : "URL" , value : "http://secunia.com/advisories/39256");
script_xref(name : "URL" , value : "http://www.vupen.com/english/advisories/2010/0854");
script_xref(name : "URL" , value : "http://securitytracker.com/alerts/2010/Apr/1023844.html");
script_tag(name:"qod_type", value:"registry");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (c) 2010 SecPod");
script_family("General");
script_dependencies("gb_justsystems_ichitaro_prdts_detect.nasl");
script_require_keys("Ichitaro/Ver");
script_tag(name : "impact" , value : tag_impact);
script_tag(name : "affected" , value : tag_affected);
script_tag(name : "insight" , value : tag_insight);
script_tag(name : "solution" , value : tag_solution);
script_tag(name : "summary" , value : tag_summary);
exit(0);
}
include("version_func.inc");
# check for Ichitaro 2006 through 2010
ichitaroVer = get_kb_item("Ichitaro/Ver");
if(ichitaroVer)
{
if(version_in_range(version:ichitaroVer, test_version:"2006", test_version2:"2010")){
security_message(0);
}
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation