JustSystems Ichitaro Character Attributes Processing Remote Code Execution Vulnerability

Bugtraq ID:	40472
Class:	Unknown
CVE:	CVE-2010-2152
Remote:	Yes
Local:	No
Published:	Jun 01 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	JustSystems
Vulnerable:	JustSystems Ichitaro 2009 JustSystems Ichitaro 2008 JustSystems Ichitaro 2007 JustSystems Ichitaro 2006 JustSystems Ichitaro 2005 JustSystems Ichitaro 2004
Not Vulnerable:

JustSystems Ichitaro Character Attributes Processing Remote Code Execution Vulnerability

Ichitaro is prone to a remote code-execution vulnerability.

Attackers may exploit this issue to execute arbitrary code within the context of the vulnerable application. Failed attempts will result in a denial-of-service condition.

Ichitaro 2009 and prior versions are vulnerable.

JustSystems Ichitaro Character Attributes Processing Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

JustSystems Ichitaro Character Attributes Processing Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for more information.

JustSystems Ichitaro Character Attributes Processing Remote Code Execution Vulnerability

References:

• Ichitaro Home Page (JustSystems)
  
• JVN#17293765 (JPCERT)
  
• Vulnerability in Ichitaro may allow arbitrary code execution. (JustSystems)