CVE-2009-1054

Опубликовано: 24 мар. 2009

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Unspecified vulnerability in JustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier allows remote attackers to execute arbitrary code via a crafted file, as exploited in the wild by Trojan.Tarodrop.H in March 2009.

Ссылки

http://secunia.com/advisories/34405
Vendor Advisory
http://www.justsystems.com/jp/info/js09001.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/34138
http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99
http://www.vupen.com/english/advisories/2009/0769
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49280
http://secunia.com/advisories/34405
Vendor Advisory
http://www.justsystems.com/jp/info/js09001.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/34138
http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99
http://www.vupen.com/english/advisories/2009/0769
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/49280

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:ichitaro:ichitaro:13:*:*:*:*:*:*:*

cpe:2.3:a:ichitaro:ichitaro:2004:*:*:*:*:*:*:*

cpe:2.3:a:ichitaro:ichitaro:2005:*:*:*:*:*:*:*

cpe:2.3:a:ichitaro:ichitaro:2006:*:*:*:*:*:*:*

cpe:2.3:a:ichitaro:ichitaro:2007:*:*:*:*:*:*:*

cpe:2.3:a:ichitaro:ichitaro:2008:*:*:*:*:*:*:*

cpe:2.3:a:ichitaro:ichitaro:lite2:*:*:*:*:*:*:*

cpe:2.3:a:ichitaro:ichitaro_viewer:*:*:*:*:*:*:*:*

Версия до 5.1.5.0 (включая)

EPSS

Процентиль: 91%

0.06463

Низкий

9.3 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-vqr9-vjpx-74p5

github

почти 4 года назад