CVEvulnerability
CVE-2006-6400
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-12-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Buffer overflow in JustSystems Hanako 2004 through 2006, Hanako viewer 1.x, Ichitaro 2004, Ichitaro 2005, Ichitaro Lite2, Ichitaro viewer 4.x, and Sanshiro 2005 allows remote attackers to execute arbitrary code via the (1) Keyword and (2) Title fields, related to string length fields.
Affected configurations
• justsystem hanako 2004
• justsystem hanako 2005
• justsystem hanako 2006
• justsystem hanako viewer 1.0
• justsystem ichitaro
• justsystem ichitaro 2005
• justsystem ichitaro 2006
• justsystem ichitaro lite2
• justsystem ichitaro lite2 r2
• justsystem ichitaro viewer 4.0
• justsystem sanshiro 2005
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://jvn.jp/jp/JVN%2347272891/index.html jvn.jp
- http://secunia.com/advisories/23185 Vendor Advisory
- http://securitytracker.com/id?1017336 securitytracker.com
- http://www.justsystem.co.jp/info/pd6005.html www.justsystem.co.jp
- http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/92_e.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/21445 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4857 www.vupen.com
- http://jvn.jp/jp/JVN%2347272891/index.html jvn.jp
- http://secunia.com/advisories/23185 Vendor Advisory
- http://securitytracker.com/id?1017336 securitytracker.com
- http://www.justsystem.co.jp/info/pd6005.html www.justsystem.co.jp
- http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/92_e.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/21445 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4857 www.vupen.com