PT-2013-1373 · Justsystems · Atok+2

Taku Kudo · Publicado 2013-01-18 · Atualizado 2013-01-29 · CVE-2009-4738

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JustSystems Corporation ATOK versions 2006 through 2009 JustSystems Corporation ATOK flat-rate service Just Smile 4 with the ATOK Smile module

Description The issue allows physically proximate users to bypass the screen lock and execute commands with system privileges. This is related to launching external applications, but the exact vectors are unknown.

Recommendations For JustSystems Corporation ATOK versions 2006 through 2009, update to a version that addresses the issue of bypassing screen lock and executing commands with system privileges. For JustSystems Corporation ATOK flat-rate service, update to a version that addresses the issue of bypassing screen lock and executing commands with system privileges. For Just Smile 4 with the ATOK Smile module, update to a version that addresses the issue of bypassing screen lock and executing commands with system privileges.

Correção

Identificadores relacionados

CVE-2009-4738

Produtos afetados

Atok

Atok Flat-Rate Service

Just Smile 4

Referências · 6

• http://securityfocus.com/bid/36220 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4738 · Nota de Segurança
• http://jvn.jp/en/jp/JVN57040664/index.html · Nota
• http://secunia.com/advisories/36560 · Aviso do Fabricante
• http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000057.html · Nota
• http://justsystems.com/jp/info/js09003.html · Aviso do Fabricante