PT-2013-4537 · Justsystems · Ichitaro+5

Published 2013-06-18 · Updated 2013-06-19 · CVE-2013-3644

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JustSystems Ichitaro versions 2006 through 2013 JustSystems Ichitaro Pro versions prior to 2 JustSystems Ichitaro Government versions 6, 7, and 2006 through 2010 JustSystems Ichitaro Portable with oreplug JustSystems Ichitaro Viewer JustSystems Ichitaro JUST School versions prior to 2010

Description The issue allows remote attackers to execute arbitrary code via a crafted document.

Recommendations For JustSystems Ichitaro versions 2006 through 2013, update to a version outside of this range. For JustSystems Ichitaro Pro versions prior to 2, update to version 2 or later. For JustSystems Ichitaro Government versions 6, 7, and 2006 through 2010, update to a version outside of this range. For JustSystems Ichitaro Portable with oreplug, remove or disable the oreplug component until a patch is available. For JustSystems Ichitaro Viewer, avoid opening crafted documents until a fix is provided. For JustSystems Ichitaro JUST School versions prior to 2010, update to version 2010 or later.

Fix

Related Identifiers

CVE-2013-3644

Affected Products

Ichitaro

Ichitaro Government

Ichitaro Just School

Ichitaro Portable

Ichitaro Pro

Ichitaro Viewer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-3644 · Security Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000058 · Note
• http://justsystems.com/jp/info/js13002.html · Note
• http://jvn.jp/en/jp/JVN98712361/index.html · Note