PT-2012-2451 · Justsystems · Just School+11

Tielei Wang · Published 2012-04-27 · Updated 2012-04-30 · CVE-2012-0269

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JustSystems Ichitaro versions 2006 through 2011 Ichitaro Government versions 2006 through 2010 Ichitaro Portable with oreplug Ichitaro Viewer JUST School versions 2009 and 2010 JUST Jump 4 JUST Frontier oreplug Shuriken Pro4 Shuriken versions 2007 through 2010 Shuriken Pro4 Corporate Edition Shuriken CE/2007 through CE/2009 Corporate Edition Shuriken 2010 Corporate Edition Rekishimail Sengokubusho no missho Bakumatsushishi no missho

Description A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted image file.

Recommendations For JustSystems Ichitaro versions 2006 through 2011, update to a version that is not affected by this issue. For Ichitaro Government versions 2006 through 2010, update to a version that is not affected by this issue. For Ichitaro Portable with oreplug, update to a version that is not affected by this issue. For Ichitaro Viewer, update to a version that is not affected by this issue. For JUST School versions 2009 and 2010, update to a version that is not affected by this issue. For JUST Jump 4, update to a version that is not affected by this issue. For JUST Frontier, update to a version that is not affected by this issue. For oreplug, update to a version that is not affected by this issue. For Shuriken Pro4, update to a version that is not affected by this issue. For Shuriken versions 2007 through 2010, update to a version that is not affected by this issue. For Shuriken Pro4 Corporate Edition, update to a version that is not affected by this issue. For Shuriken CE/2007 through CE/2009 Corporate Edition, update to a version that is not affected by this issue. For Shuriken 2010 Corporate Edition, update to a version that is not affected by this issue. For Rekishimail Sengokubusho no missho, update to a version that is not affected by this issue. For Bakumatsushishi no missho, update to a version that is not affected by this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-0269

Affected Products

Bakumatsushishi No Missho

Ichitaro Government

Ichitaro Portable

Ichitaro Viewer

Just Frontier

Just Jump

Just School

Justsystems Ichitaro

Rekishimail Sengokubusho No Missho

Shuriken

Shuriken Pro4

Oreplug

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-0269 · Security Note
• http://justsystems.com/jp/info/js12001.html · Vendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000035 · Note
• http://jvn.jp/en/jp/JVN09619876/index.html · Note