critical9.3
CVE-2011-1331
JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro Viewer allo…
Impact
JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro Viewer allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document, as exploited in the wild in early 2011.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Justsystems | Ichitaro | Versions 6, 2005, 2006, 2007, 2008, 2009 |
| Justsystems | Ichitaro Portable | All versions |
| Justsystems | Ichitaro Pro | All versions |
| Justsystems | Ichitaro Viewer | All versions Versions 5.1.3.0, 19.0.1.0, 19.0.2.0, 19.0.3.0, 20.0.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN87239473/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000043
- http://secunia.com/advisories/44956
- http://www.justsystems.com/jp/info/js11001.html
- http://www.securityfocus.com/bid/48283
- http://www.symantec.com/connect/blogs/targeted-attacks-2011-using-ichitaro-zero-day-vulnerability
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68072
- http://jvn.jp/en/jp/JVN87239473/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000043
- http://secunia.com/advisories/44956
- http://www.justsystems.com/jp/info/js11001.html
- http://www.securityfocus.com/bid/48283
- http://www.symantec.com/connect/blogs/targeted-attacks-2011-using-ichitaro-zero-day-vulnerability
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68072