CVE-2012-1242
Summary
| CVE | CVE-2012-1242 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-04-27 18:55:00 UTC |
| Updated | 2017-12-14 02:29:00 UTC |
| Description | Untrusted search path vulnerability in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and 2010, JUST Jump 4, JUST Frontier, and oreplug allows local users to gain privileges via a Trojan horse DLL in the current working directory. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Justsystems | Ichitaro | 2006 | All | All | All |
| Application | Justsystems | Ichitaro | 2006 | - | government | All |
| Application | Justsystems | Ichitaro | 2007 | All | All | All |
| Application | Justsystems | Ichitaro | 2007 | - | government | All |
| Application | Justsystems | Ichitaro | 2008 | All | All | All |
| Application | Justsystems | Ichitaro | 2008 | - | government | All |
| Application | Justsystems | Ichitaro | 2009 | All | All | All |
| Application | Justsystems | Ichitaro | 2009 | - | government | All |
| Application | Justsystems | Ichitaro | 2010 | All | All | All |
| Application | Justsystems | Ichitaro | 2010 | - | government | All |
| Application | Justsystems | Ichitaro | 2011 | All | All | All |
| Application | Justsystems | Ichitaro | 2011 | - | sou | All |
| Application | Justsystems | Ichitaro | 2006 | All | All | All |
| Application | Justsystems | Ichitaro | 2006 | - | government | All |
| Application | Justsystems | Ichitaro | 2007 | All | All | All |
| Application | Justsystems | Ichitaro | 2007 | - | government | All |
| Application | Justsystems | Ichitaro | 2008 | All | All | All |
| Application | Justsystems | Ichitaro | 2008 | - | government | All |
| Application | Justsystems | Ichitaro | 2009 | All | All | All |
| Application | Justsystems | Ichitaro | 2009 | - | government | All |
| Application | Justsystems | Ichitaro | 2010 | All | All | All |
| Application | Justsystems | Ichitaro | 2010 | - | government | All |
| Application | Justsystems | Ichitaro | 2011 | All | All | All |
| Application | Justsystems | Ichitaro | 2011 | - | sou | All |
| Application | Justsystems | Ichitaro Portable With Oreplug | - | All | All | All |
| Application | Justsystems | Ichitaro Portable With Oreplug | - | All | All | All |
| Application | Justsystems | Ichitaro Viewer | - | All | All | All |
| Application | Justsystems | Ichitaro Viewer | - | All | All | All |
| Application | Justsystems | Just Frontier | - | All | All | All |
| Application | Justsystems | Just Frontier | - | All | All | All |
| Application | Justsystems | Just Jump | 4 | All | All | All |
| Application | Justsystems | Just Jump | 4 | All | All | All |
| Application | Justsystems | Just School | - | All | All | All |
| Application | Justsystems | Just School | 2009 | All | All | All |
| Application | Justsystems | Just School | 2010 | All | All | All |
| Application | Justsystems | Just School | - | All | All | All |
| Application | Justsystems | Just School | 2009 | All | All | All |
| Application | Justsystems | Just School | 2010 | All | All | All |
| Application | Justsystems | Oreplug | - | All | All | All |
| Application | Justsystems | Oreplug | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [JS12001]一太郎・Shurikenの脆弱性を悪用した不正なプログラムの実行危険性について (update: 2012.4.26) | お知らせ | ジャストシステム | CONFIRM | www.justsystems.com | Vendor Advisory |
| JVN#95378720: Multiple JustSystems products may insecurely load dynamic libraries | JVN | jvn.jp | |
| 81472 | OSVDB | osvdb.org | |
| JVNDB-2012-000034 | JVNDB | jvndb.jvn.jp | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.