JustSystem Ichitaro Unspecified Code Execution Vulnerability

2007-08-02T00:00:00
ID SMNTC-25187
Type symantec
Reporter Symantec Security Response
Modified 2007-08-02T00:00:00

Description

Description

Ichitaro is prone to an unspecified remotely exploitable code-execution vulnerability. Remote attackers may exploit this issue to execute arbitrary code within the context of the currently logged in user. This issue is being exploited in the wild by Trojan.Tarodrop.D. Few details are available regarding this issue. This BID will be updated when more information emerges.

Technologies Affected

  • JustSystems Ichitaro 2005
  • JustSystems Ichitaro 2006
  • JustSystems Ichitaro 2007

Recommendations

Run all software as a nonprivileged user with minimal access rights.
To limit the impact of latent vulnerabilities, run the vulnerable application as an unprivileged user with minimal access rights.

Do not accept or execute files from untrusted or unknown sources.
Do not accept or open documents from unknown or untrusted individuals.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.