PT-2013-1373 · Justsystems · Atok+2

Taku Kudo · Published 2013-01-18 · Updated 2013-01-29 · CVE-2009-4738

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JustSystems Corporation ATOK versions 2006 through 2009 JustSystems Corporation ATOK flat-rate service Just Smile 4 with the ATOK Smile module

Description The issue allows physically proximate users to bypass the screen lock and execute commands with system privileges. This is related to launching external applications, but the exact vectors are unknown.

Recommendations For JustSystems Corporation ATOK versions 2006 through 2009, update to a version that addresses the issue of bypassing screen lock and executing commands with system privileges. For JustSystems Corporation ATOK flat-rate service, update to a version that addresses the issue of bypassing screen lock and executing commands with system privileges. For Just Smile 4 with the ATOK Smile module, update to a version that addresses the issue of bypassing screen lock and executing commands with system privileges.

Fix

Related Identifiers

CVE-2009-4738

Affected Products

Atok

Atok Flat-Rate Service

Just Smile 4

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2009-4738 · Security Note
• http://secunia.com/advisories/36560 · Vendor Advisory
• http://justsystems.com/jp/info/js09003.html · Vendor Advisory
• http://securityfocus.com/bid/36220 · Note
• http://jvn.jp/en/jp/JVN57040664/index.html · Note
• http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000057.html · Note