Vulnerabilities > CVE-2010-2152 - Remote Code Execution vulnerability in Justsystems Ichitaro and Just School

CVSS 9.3 - CRITICAL

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

justsystems

critical

NVD

Published: 2010-06-03

Updated: 2017-08-17

Summary

Unspecified vulnerability in JustSystems Ichitaro 2004 through 2009, Ichitaro Government 2006 through 2009, and Just School 2008 and 2009 allows remote attackers to execute arbitrary code via unknown vectors related to "product character attribute processing" for a document.

Vulnerable Configurations

Part	Description	Count
Application	Justsystems Justsystems Ichitaro 2004 Justsystems Ichitaro 2005 Justsystems Ichitaro 2006 Justsystems Ichitaro 2007 Justsystems Ichitaro 2008 Justsystems Ichitaro 2009 Justsystems Just School 2008 Justsystems Just School 2009	12

References

http://jvn.jp/en/jp/JVN17293765/index.html
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000024.html
http://osvdb.org/65050
http://secunia.com/advisories/40008
http://www.ipa.go.jp/about/press/20100601.html
http://www.justsystems.com/jp/info/js10002.html
http://www.securityfocus.com/bid/40472
http://www.vupen.com/english/advisories/2010/1283
https://exchange.xforce.ibmcloud.com/vulnerabilities/59037