JustSystems Ichitaro Memory Management Program Remote Heap Buffer Overflow Vulnerability

Bugtraq ID:	48283
Class:	Boundary Condition Error
CVE:	CVE-2011-1331
Remote:	Yes
Local:	No
Published:	Jun 16 2011 12:00AM
Updated:	Jun 16 2011 12:00AM
Credit:	This issue was discovered in the wild.
Vulnerable:	JustSystems Ichitaro 2011 JustSystems Ichitaro 2010 JustSystems Ichitaro 2009 JustSystems Ichitaro 2008 JustSystems Ichitaro 2007 JustSystems Ichitaro 2006 JustSystems Ichitaro 2005
Not Vulnerable:

JustSystems Ichitaro Memory Management Program Remote Heap Buffer Overflow Vulnerability

JustSystems Ichitaro is prone to a remote buffer-overflow vulnerability.

Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted file.

Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

JustSystems Ichitaro Memory Management Program Remote Heap Buffer Overflow Vulnerability

This issue is actively being exploited in the wild. It is detected as Trojan.Tarodrop.

JustSystems Ichitaro Memory Management Program Remote Heap Buffer Overflow Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

JustSystems Ichitaro Memory Management Program Remote Heap Buffer Overflow Vulnerability

References:

• [JS11001] about the dangers of running an illegal program that exploits a vulner (JustSystems)
  
• Ichitaro Home Page (JustSystems)
  
• Targeted Attacks in 2011 Using Ichitaro Zero-Day Vulnerability (Kazumasa Itabashi)