Buffer overflow in Justsystems Ichitaro
CVE-2011-1331
JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro Viewer allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document, as exploited in the wild in early 2011.
Vulnerability class: Buffer Overflow
EPSS: 0.056 (92.0th percentile) — read the EPSS interpretation.
Affected products
- Justsystems Ichitaro — versions 6, 2005, 2006
- Justsystems Ichitaro_portable
- Justsystems Ichitaro_pro
- Justsystems Ichitaro_viewer — versions 5.1.3.0, 19.0.1.0, 19.0.2.0
- N/a — versions n/a
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- vultures@jpcert.or.jp (vdb-entry, x_refsource_BID)
- vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
- vultures@jpcert.or.jp (vdb-entry, x_refsource_XF)
- vultures@jpcert.or.jp (x_refsource_CONFIRM, Patch, Vendor Advisory)
- vultures@jpcert.or.jp (Exploit, x_refsource_MISC)
- vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)