Lucene search
+L

302 matches found

Talos
Talos
added 2017/02/24 12:00 a.m.36 views

Ichitaro Word Processor PersistDirectory Code Execution Vulnerability

Summary Ichitaro Office contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function’s result, the application will use this result in a pointer calculation for reading file data into. Due t...

7.8CVSS7.6AI score0.01153EPSS
SaveExploits1
Talos
Talos
added 2017/02/24 12:00 a.m.64 views

Ichitaro Office JTD Figure handling Code Execution Vulnerability

Summary A vulnerability was discovered within the Ichitaro word processor. Ichitaro is published by JustSystems and is considered one of the more popular word processors used within Japan. Ichitaro’s proprietary file format is a Compound Document similar to .doc for Microsoft Word called .jtd. Wh...

9.8CVSS0.1AI score0.0234EPSS
SaveExploits1
VulnCheck KEV
VulnCheck KEV
added 2016/03/08 12:00 a.m.16 views

VulnCheck KEV: CVE-2014-7247

Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file...

10CVSS6.2AI score0.05335EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2016/02/23 12:00 a.m.12 views

VulnCheck KEV: CVE-2013-5990

Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen and Gen Trial Edition; Ichitaro Pro; Ichitaro Pro 2 and Pro 2 Trial Edition; Ichitaro Viewer; and Ichitaro Portable with...

9.3CVSS6AI score0.04587EPSS
SaveExploits0References1
NVD
NVD
added 2014/11/26 2:59 a.m.29 views

CVE-2014-7247

Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file...

10CVSS7.5AI score0.05335EPSS
SaveExploits0References3
Prion
Prion
added 2014/11/26 2:59 a.m.24 views

Code injection

Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file...

10CVSS8.1AI score0.05335EPSS
SaveExploits0References3Affected Software2
CVE
CVE
added 2014/11/26 2:00 a.m.60 views

CVE-2014-7247

Summary (CVE-2014-7247) : The vulnerability affects JustSystems Ichitaro family (2008–2014 Tetsu, Gov., Pro, Pro 2, Sou/Shou/Gen variants). It enables remote code execution when a user opens a crafted file, due to an unspecified flaw in the affected software. Multiple connected sources corroborat...

10CVSS7.7AI score0.05335EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
added 2014/11/26 2:00 a.m.39 views

CVE-2014-7247

Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file...

7.5AI score0.05335EPSS
SaveExploits0References3
Check Point Advisories
Check Point Advisories
added 2014/11/20 12:00 a.m.33 views

Multiple Ichitaro Products Unspecified Remote Code Execution (CVE-2014-7247)

An Unspecified Remote Code Execution detected in Ichitaro Multiple Products. An attacker can exploit this vulnerability to execute arbitrary code with admin privileges. Successful exploitation of this issue will allow execution of arbitrary code on an affected system...

10CVSS7.8AI score0.05335EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2014/11/13 7:52 a.m.13 views

Ichitaro series vulnerable to arbitrary code execution

Overview The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution. This vulnerability differs from other issues that were previously published on JVN. For more information, please refer to the developer's website...

10CVSS7.6AI score0.05335EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2014/11/13 12:00 a.m.47 views

JVN#16318793: Ichitaro series vulnerable to arbitrary code execution

The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution. For more information, please refer to the developer's website. Impact When a user opens a specially crafted file, arbitrary code may be executed. Solution...

10CVSS6.8AI score0.05335EPSS
SaveExploits0
Symantec
Symantec
added 2014/11/13 12:00 a.m.39 views

Multiple Ichitaro Products CVE-2014-7247 Unspecified Remote Code Execution Vulnerability

Description Multiple Ichitaro products are prone to an unspecified remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with admin privileges. Successful exploits will completely compromise affected computer. Technologies Affected JustSystems Ichitaro...

10CVSS0.7AI score0.05335EPSS
SaveExploits0References1Affected Software3
NVD
NVD
added 2014/06/16 2:55 p.m.22 views

CVE-2014-2003

JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and execute arbitrary code via a crafted signature...

7.6CVSS7.5AI score0.03592EPSS
SaveExploits0References4
Prion
Prion
added 2014/06/16 2:55 p.m.21 views

Code injection

JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and execute arbitrary code via a crafted signature...

7.6CVSS8AI score0.03592EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2014/06/16 2:00 p.m.38 views

CVE-2014-2003

JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and execute arbitrary code via a crafted signature...

7.5AI score0.03592EPSS
SaveExploits0References4
CVE
CVE
added 2014/06/16 2:00 p.m.64 views

CVE-2014-2003

CVE-2014-2003 affects JustSystems products that bundle the JUST Online Update (e.g., Ichitaro) up through 2014. The issue is a flaw in how update-module signatures are validated, allowing a remote attacker to spoof modules and execute arbitrary code via a crafted signature. Root cause: insufficie...

7.6CVSS7.7AI score0.03592EPSS
SaveExploits0References4Affected Software2
Kaspersky
Kaspersky
added 2013/12/11 12:00 a.m.42 views

KLA10217 ACE vulnerability in Ichitaro

An unspecified vulnerability was found in JustSystem Ichitaro. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed document. Original advisories JustSystems bulletin Related products Ichitaro-viewer...

9.3CVSS7.7AI score0.04587EPSS
SaveExploits0References5
The Hacker News
The Hacker News
added 2013/11/15 4:35 p.m.20 views

Japanese word processor 'Ichitaro' zero-day attack discovered in the wild

Japanese most popular word processing software 'Ichitaro' and Multiple Products are vulnerable to a zero day Remote Code Execution Flaw Vulnerability, allowing the execution of arbitrary code to compromise a user's system. According to assigned CVE-2013-5990, malicious attacker is able to gain...

9.3CVSS8AI score0.8593EPSS
SaveExploits17
The Hacker News
The Hacker News
added 2013/11/15 5:35 a.m.84 views

Japanese word processor 'Ichitaro' zero-day attack discovered in the wild

None...

9.3CVSS2.1AI score0.8593EPSS
SaveExploits17
NVD
NVD
added 2013/11/13 3:55 p.m.29 views

CVE-2013-5990

Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen and Gen Trial Edition; Ichitaro Pro; Ichitaro Pro 2 and Pro 2 Trial Edition; Ichitaro Viewer; and Ichitaro Portable with...

9.3CVSS7.6AI score0.04587EPSS
SaveExploits0References3
Rows per page
Query Builder