CVE-2007-4246

CVE-2007-4246 concerns Justsystem Ichitaro 2007 and earlier with a buffer overflow vulnerability that could allow remote code execution via a specially modified document. Multiple connected sources (e.g., JVNDB entries for Hanako and Ichitaro buffer overflow, and NVD/NIST reflex entries) corrobor...

CVE-2007-6436

A stack-based buffer overflow exists in JSGCI.DLL within JustSystems Ichitaro 2005, 2006, and 2007 . This vulnerability allows user-assisted remote attackers to execute arbitrary code by processing a crafted document . This flaw was actively exploited in December 2007 by the Tarodrop.F trojan . S...

CVE-2006-4326

A stack-based buffer overflow vulnerability exists in Justsystem Ichitaro (versions 9.x through 13.x, 2004, 2005, 2006, and Government 2006), Ichitaro for Linux , and FormLiner (before 20060818). The root cause is the improper handling of long Unicode strings within a crafted document , which all...

CVE-2006-5424

CVE-2006-5424 concerns an unspecified vulnerability in Justsystem Ichitaro 2006, including the 2006 trial and Government 2006, that could allow remote attackers to execute arbitrary code via a modified document. The description notes this is a different vulnerability from CVE-2006-4326. Connected...

CVE-2006-6400

CVE-2006-6400 affects JustSystems Hanako family and related Ichitaro components (Hanako 2004–2006, Hanako viewer 1.x, Ichitaro 2004–2005, Ichitaro Lite2, Ichitaro viewer 4.x, Sanshiro 2005). The root cause is a buffer overflow in string length handling affecting the 1) Keyword and 2) Title fields...

CVE-2007-5687

The Ichitaro series (JustSystems) contains a buffer overflow vulnerability in its rich text processing. Affects Ichitaro 2004–2007, 11–13, and other versions. The flaw arises in long inputs to (1) pard fields or (2) font names in fcharset0, which are not properly handled in JSTARO4.OCX, and (3) l...

CVE-2008-0223

CVE-2008-0223 involves a buffer overflow in JustSystems JSFC.DLL used by multiple JustSystems products (e.g., Ichitaro). The JTD file handling is the trigger, allowing a remote attacker to execute arbitrary code when a specially crafted .JTD file is opened or viewed. The JVN entry confirms multip...