PT-2009-3635 · Justsystems · Justsystems Ichitaro+2

Published 2009-03-24 · Updated 2017-08-17 · CVE-2009-1054

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JustSystems Ichitaro versions 13, 2004 through 2008 JustSystems Ichitaro Lite2 JustSystems Ichitaro viewer version 5.1.5.0 and earlier

Description The issue allows remote attackers to execute arbitrary code via a crafted file. It has been exploited in the wild by Trojan.Tarodrop.H in March 2009.

Recommendations For JustSystems Ichitaro versions 13, 2004 through 2008, update to a version that is not affected by this issue. For JustSystems Ichitaro Lite2, update to a version that is not affected by this issue. For JustSystems Ichitaro viewer version 5.1.5.0 and earlier, update to a version that is not affected by this issue.

Fix

Related Identifiers

CVE-2009-1054

Affected Products

Justsystems Ichitaro

Justsystems Ichitaro Lite2

Justsystems Ichitaro Viewer

References · 7

• http://vupen.com/english/advisories/2009/0769 · Vendor Advisory
• http://justsystems.com/jp/info/js09001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1054 · Security Note
• http://secunia.com/advisories/34405 · Vendor Advisory
• http://securityfocus.com/bid/34138 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49280 · Note
• http://symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99 · Note