PT-2013-2545 · Justsystems · Hanako Police 2010+6

Published 2013-03-01 · Updated 2013-03-01 · CVE-2013-0707

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JustSystems Ichitaro versions 2006 through 2007 JustSystems Ichitaro Government versions 2006 through 2007 JustSystems Ichitaro Portable with oreplug JustSystems Hanako versions 2006 through 2013 JustSystems Hanako Police JustSystems Hanako Police 3 JustSystems Hanako Police 2010

Description The issue allows remote attackers to execute arbitrary code via a crafted file.

Recommendations For JustSystems Ichitaro versions 2006 through 2007, update to a version that is not affected by this issue. For JustSystems Ichitaro Government versions 2006 through 2007, update to a version that is not affected by this issue. For JustSystems Ichitaro Portable with oreplug, update to a version that is not affected by this issue. For JustSystems Hanako versions 2006 through 2013, update to a version that is not affected by this issue. For JustSystems Hanako Police, update to a version that is not affected by this issue. For JustSystems Hanako Police 3, update to a version that is not affected by this issue. For JustSystems Hanako Police 2010, update to a version that is not affected by this issue.

Fix

Related Identifiers

CVE-2013-0707

Affected Products

Hanako

Hanako Police

Hanako Police 2010

Hanako Police 3

Ichitaro

Ichitaro Government

Ichitaro Portable

References · 4

• http://justsystems.com/jp/info/js13001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0707 · Security Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000015 · Note
• http://jvn.jp/en/jp/JVN16817324/index.html · Note