Vulnerabilities > CVE-2013-5990 - Remote Code Execution vulnerability in Multiple Ichitaro Products

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
justsystems
critical
NVD
Published: 2013-11-13
Updated: 2013-11-14

Summary

Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen and Gen Trial Edition; Ichitaro Pro; Ichitaro Pro 2 and Pro 2 Trial Edition; Ichitaro Viewer; and Ichitaro Portable with oreplug allows remote attackers to execute arbitrary code via a crafted document.

Vulnerable Configurations

Part Description Count
Application
Justsystems
22

The Hacker News

idTHN:1A9D68675814428FB1A1DD8C3778BCF1
last seen2017-01-08
modified2013-11-15
published2013-11-15
reporterMohit Kumar
sourcehttp://thehackernews.com/2013/11/Japanese-Ichitaro-zero-day-vulnerability-CVE-2013-5990.html
titleJapanese word processor 'Ichitaro' zero-day attack discovered in the wild

References