PT-2009-3635 · Justsystems · Justsystems Ichitaro+2

Publicado 2009-03-24 · Atualizado 2017-08-17 · CVE-2009-1054

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JustSystems Ichitaro versions 13, 2004 through 2008 JustSystems Ichitaro Lite2 JustSystems Ichitaro viewer version 5.1.5.0 and earlier

Description The issue allows remote attackers to execute arbitrary code via a crafted file. It has been exploited in the wild by Trojan.Tarodrop.H in March 2009.

Recommendations For JustSystems Ichitaro versions 13, 2004 through 2008, update to a version that is not affected by this issue. For JustSystems Ichitaro Lite2, update to a version that is not affected by this issue. For JustSystems Ichitaro viewer version 5.1.5.0 and earlier, update to a version that is not affected by this issue.

Correção

Identificadores relacionados

CVE-2009-1054

Produtos afetados

Justsystems Ichitaro

Justsystems Ichitaro Lite2

Justsystems Ichitaro Viewer

Referências · 7

• http://vupen.com/english/advisories/2009/0769 · Aviso do Fabricante
• http://securityfocus.com/bid/34138 · Nota
• http://justsystems.com/jp/info/js09001.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-1054 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49280 · Nota
• http://symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99 · Nota
• http://secunia.com/advisories/34405 · Aviso do Fabricante