PT-2010-3762 · Justsystems · Ichitaro Government+2

Published 2010-06-03 · Updated 2017-08-17 · CVE-2010-2152

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JustSystems Ichitaro versions 2004 through 2009 JustSystems Ichitaro Government versions 2006 through 2009 JustSystems Just School versions 2008 through 2009

Description The issue allows remote attackers to execute arbitrary code via unknown vectors related to product character attribute processing for a document.

Recommendations For JustSystems Ichitaro versions 2004 through 2009, update to a version that is not affected by this issue. For JustSystems Ichitaro Government versions 2006 through 2009, update to a version that is not affected by this issue. For JustSystems Just School versions 2008 through 2009, update to a version that is not affected by this issue. As a temporary workaround, consider restricting the processing of product character attributes in documents until a patch is available.

Fix

Related Identifiers

CVE-2010-2152

Affected Products

Ichitaro

Ichitaro Government

Just School

References · 10

• http://secunia.com/advisories/40008 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2152 · Security Note
• http://justsystems.com/jp/info/js10002.html · Vendor Advisory
• http://vupen.com/english/advisories/2010/1283 · Vendor Advisory
• http://osvdb.org/65050 · Note
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000024.html · Note
• http://jvn.jp/en/jp/JVN17293765/index.html · Note
• http://ipa.go.jp/about/press/20100601.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59037 · Note
• http://securityfocus.com/bid/40472 · Note