JustSystems Multiple Products 'JSFC.DLL' Buffer Overflow Vulnerability

Bugtraq ID:	27153
Class:	Boundary Condition Error
CVE:	CVE-2008-0223
Remote:	Yes
Local:	No
Published:	Jan 07 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	Hiroshi Ukai is credited with the discovery of this issue.
Vulnerable:	JustSystems Ichitaro 2007 JustSystems Ichitaro 2006 JustSystems Ichitaro 2005 JustSystems Ichitaro 2004 JustSystems Ichitaro 13 JustSystems Ichitaro 12 JustSystems Ichitaro 11 Justsystem Ichitaro viewer 0 Justsystem Ichitaro Lite2 0 Justsystem Ichitaro for Linux 0
Not Vulnerable:

JustSystems Multiple Products 'JSFC.DLL' Buffer Overflow Vulnerability

JustSystems products are prone to a buffer-overflow vulnerability.

Successful exploits may allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed attempts will likely cause denial-of-service conditions.

The issue affects various JustSystems products using the 'JSFC.DLL' library. Please see the referenced vendor advisory for details on vulnerable products and updates.

JustSystems Multiple Products 'JSFC.DLL' Buffer Overflow Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

JustSystems Multiple Products 'JSFC.DLL' Buffer Overflow Vulnerability

Solution:
The vendor released an advisory and patches to address this issue. Please see the references for more information.

JustSystems Multiple Products 'JSFC.DLL' Buffer Overflow Vulnerability

References:

• Just System Products Advisory buffer overflow vulnerability (Justsystems)
  
• FFRRA-20080107 Just System buffer overflow vulnerability (Fourteenfourty Research Institute)
  
• Justsystems Products Web Site (Justsystems)
  
• JVN#08237857 (JVN)