CVE-2009-4737

EPSS 3.48%
Veröffentlicht 06.04.2010 22:30:00
Zuletzt bearbeitet 16.06.2026 23:14:15
Erkennungen
Login

Stack-based buffer overflow in JustSystems Corporation Ichitaro 13, 2004 through 2009, Viewer 2009 19.0.1.0 and earlier, and other versions allows context-dependent attackers to execute arbitrary code via a crafted Rich Text File (RTF), related to "pvpara ffooter."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 13

NVD 15 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Justsystems ≫ Ichitaro Version 13

Justsystems ≫ Ichitaro Version 2004

Justsystems ≫ Ichitaro Version 2005

Justsystems ≫ Ichitaro Version 2006

Justsystems ≫ Ichitaro Version 2006 Update - Edition government

Justsystems ≫ Ichitaro Version 2007

Justsystems ≫ Ichitaro Version 2007 Update - Edition government

Justsystems ≫ Ichitaro Version 2008

Justsystems ≫ Ichitaro Version 2008 Update - Edition government

Justsystems ≫ Ichitaro Version 2009

Justsystems ≫ Ichitaro Version 2009 Update - Edition government

Justsystems ≫ Ichitaro Version 2009 Update - Edition trial

Justsystems ≫ Ichitaro Version bungei

Justsystems ≫ Ichitaro Viewer Version 19.0.1.0

Justsystems ≫ Ichitaro Viewer Version 20.0.2.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.48%	0.876

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://jvn.jp/en/jp/JVN33846134/index.html

http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000018.html

http://secunia.com/advisories/34611

Vendor Advisory

http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20090407

http://www.ipa.go.jp/security/vuln/documents/2009/200904_ichitaro.html

http://www.justsystems.com/jp/info/js09002.html

Patch

Vendor Advisory

http://www.osvdb.org/53349

http://www.securityfocus.com/bid/34403

http://www.vupen.com/english/advisories/2009/0957

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/49739

https://nvd.nist.gov/vuln/detail/CVE-2009-4737

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-4737

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-4737

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-4737