9.3

CVE-2012-0269

Buffer overflow in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and 2010, JUST Jump 4, JUST Frontier, oreplug, Shuriken Pro4, Shuriken 2007 through 2010, Shuriken Pro4 Corporate Edition, Shuriken CE/2007 through CE/2009 Corporate Edition, Shuriken 2010 Corporate Edition, Rekishimail Sengokubusho no missho, and Bakumatsushishi no missho allows remote attackers to execute arbitrary code via a crafted image file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Justsystems ≫ Ichitaro Version 2006
Justsystems ≫ Ichitaro Version 2006 Update - Edition government
Justsystems ≫ Ichitaro Version 2007
Justsystems ≫ Ichitaro Version 2007 Update - Edition government
Justsystems ≫ Ichitaro Version 2008
Justsystems ≫ Ichitaro Version 2008 Update - Edition government
Justsystems ≫ Ichitaro Version 2009
Justsystems ≫ Ichitaro Version 2009 Update - Edition government
Justsystems ≫ Ichitaro Version 2010
Justsystems ≫ Ichitaro Version 2010 Update - Edition government
Justsystems ≫ Ichitaro Version 2011
Justsystems ≫ Ichitaro Version 2011 Update - Edition sou
Justsystems ≫ Just Frontier Version -
Justsystems ≫ Just Jump Version 4
Justsystems ≫ Just School Version -
Justsystems ≫ Just School Version 2009
Justsystems ≫ Just School Version 2010
Justsystems ≫ Oreplug Version -
Justsystems ≫ Shuriken Version 2007
Justsystems ≫ Shuriken Version 2007 Update - Edition corporate
Justsystems ≫ Shuriken Version 2008
Justsystems ≫ Shuriken Version 2008 Update - Edition corporate
Justsystems ≫ Shuriken Version 2009
Justsystems ≫ Shuriken Version 2009 Update - Edition corporate
Justsystems ≫ Shuriken Version 2010
Justsystems ≫ Shuriken Version 2010 Update - Edition corporate
Justsystems ≫ Shuriken Pro Version 4
Justsystems ≫ Shuriken Pro Version 4 Update - Edition corporate
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.23% 0.897
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://jvn.jp/en/jp/JVN09619876/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000035
http://www.justsystems.com/jp/info/js12001.html
Vendor Advisory