JustSystems Ichitaro RTF File Buffer Overflow Vulnerability

Bugtraq ID:	34403
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 07 2009 12:00AM
Updated:	Apr 07 2009 06:16PM
Credit:	Ugai Hiroshi
Vulnerable:	JustSystems Ichitaro 2009 JustSystems Ichitaro 2008 JustSystems Ichitaro 2007 JustSystems Ichitaro 2006 JustSystems Ichitaro 2005 JustSystems Ichitaro 2004 JustSystems Ichitaro 13 Justsystem Ichitaro Viewer 2009 19.0.1 .0 Justsystem Ichitaro viewer 5.1.3 .0 Justsystem Ichitaro viewer 0
Not Vulnerable:	Justsystem Ichitaro Viewer 2009 19.0.2 .0

JustSystems Ichitaro RTF File Buffer Overflow Vulnerability

Ichitaro is prone to a remote buffer-overflow vulnerability.

Attackers may exploit this issue to execute arbitrary code within the context of the vulnerable application. Failed attempts will result in a denial-of-service condition.

Ichitaro 2009 and prior versions are vulnerable.

JustSystems Ichitaro RTF File Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

JustSystems Ichitaro RTF File Buffer Overflow Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for more information.

JustSystems Ichitaro RTF File Buffer Overflow Vulnerability

References:

• [FFRRA-20090407] buffer overflow vulnerability in Ichitaro (Fourteenforty)
  
• [JS09002] run the risk of malicious programs that exploit vulnerabilities in Ich (JustSystem)
  
• Ichitaro Home Page (JustSystems)