ChaSen Unspecified Buffer Overflow Vulnerability

Bugtraq ID:	50588
Class:	Boundary Condition Error
CVE:	CVE-2011-4000
Remote:	Yes
Local:	No
Published:	Nov 08 2011 12:00AM
Updated:	Jul 10 2012 07:00AM
Credit:	Kenji Aiko
Vulnerable:	OSDN Corporation ChaSen 2.4 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	OSDN Corporation ChaSen 2.3.3

ChaSen Unspecified Buffer Overflow Vulnerability

ChaSen is prone to a unspecified buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of an application using the affected library. Failed exploit attempts will result in denial-of-service conditions.

ChaSen 2.4 is vulnerable; other versions may also be affected.

ChaSen Unspecified Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ChaSen Unspecified Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

ChaSen Unspecified Buffer Overflow Vulnerability

References:

• ChaSen legacy Download (OSDN Corporation)
  
• JVN#16901583 ChaSen vulnerable to buffer overflow (JVN)