CVE-2007-6436

CVE-2007-6436 describes a stack-based buffer overflow in JSGCI.DLL used by JustSystems Ichitaro 2005–2007. The vulnerability allows a user‑assisted remote attacker to execute arbitrary code by convincing a user to open a crafted document, with the issue noted as actively exploited in December 200...

CVE-2006-4326

CVE-2006-4326 : A stack-based buffer overflow in Justsystem Ichitaro versions 9.x–13.x, Ichitaro 2004–2006, Ichitaro for Linux, Government 2006, and FormLiner before 20060818 allows remote attackers to execute arbitrary code via long Unicode strings in a crafted document. This vulnerability has b...

CVE-2007-4246

CVE-2007-4246 concerns Justsystem Ichitaro 2007 and earlier with a buffer overflow vulnerability that could allow remote code execution via a specially modified document. Multiple connected sources (e.g., JVNDB entries for Hanako and Ichitaro buffer overflow, and NVD/NIST reflex entries) corrobor...

CVE-2006-6400

CVE-2006-6400 affects JustSystems Hanako family and related Ichitaro components (Hanako 2004–2006, Hanako viewer 1.x, Ichitaro 2004–2005, Ichitaro Lite2, Ichitaro viewer 4.x, Sanshiro 2005). The root cause is a buffer overflow in string length handling affecting the 1) Keyword and 2) Title fields...

CVE-2006-5424

CVE-2006-5424 concerns an unspecified vulnerability in Justsystem Ichitaro 2006, including the 2006 trial and Government 2006, that could allow remote attackers to execute arbitrary code via a modified document. The description notes this is a different vulnerability from CVE-2006-4326. Connected...

CVE-2007-5687

The Ichitaro series (JustSystems) contains a buffer overflow vulnerability in its rich text processing. Affects Ichitaro 2004–2007, 11–13, and other versions. The flaw arises in long inputs to (1) pard fields or (2) font names in fcharset0, which are not properly handled in JSTARO4.OCX, and (3) l...

CVE-2008-0223

CVE-2008-0223 involves a buffer overflow in JustSystems JSFC.DLL used by multiple JustSystems products (e.g., Ichitaro). The JTD file handling is the trigger, allowing a remote attacker to execute arbitrary code when a specially crafted .JTD file is opened or viewed. The JVN entry confirms multip...