JustSystems Ichitaro JSGCI.DLL Unspecified Stack Buffer Overflow Vulnerability

Bugtraq ID:	26846
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 13 2007 12:00AM
Updated:	Dec 13 2007 04:32PM
Credit:	Symantec discovered this issue as a zero-day attack.
Vulnerable:	JustSystems Ichitaro 2007 JustSystems Ichitaro 2006 JustSystems Ichitaro 2005
Not Vulnerable:

JustSystems Ichitaro JSGCI.DLL Unspecified Stack Buffer Overflow Vulnerability

Ichitaro is prone to an unspecified stack-based buffer-overflow vulnerability.

Successful exploits may allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed attempts will likely cause denial-of-service conditions.

The issue affects Ichitaro 2005, 2006 and 2007; other versions may also be vulnerable.

This issue is being exploited in the wild by Trojan.Tarodrop.F.

Few details are available regarding this issue. We will update this BID as more information emerges.

JustSystems Ichitaro JSGCI.DLL Unspecified Stack Buffer Overflow Vulnerability

This issue is currently being actively exploited in the wild.

JustSystems Ichitaro JSGCI.DLL Unspecified Stack Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

JustSystems Ichitaro JSGCI.DLL Unspecified Stack Buffer Overflow Vulnerability

References:

• Ichitaro Home Page (JustSystems)
  
• Trojan.Tarodrop.F (Symantec)