CVEvulnerability

CVE-2007-5687

9.3 HIGH Published 2007-10-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-10-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long (1) pard field or (2) font name in the fcharset0 field, which is not properly handled in (a) JSTARO4.OCX; or (3) a long title, which is not properly handled by (b) TJSVDA.DLL.

Affected configurations

• justsystem ichitaro 11.0 • justsystem ichitaro 12.0 • justsystem ichitaro 13.0 • justsystem ichitaro 2004 • justsystem ichitaro 2005 • justsystem ichitaro 2006 • justsystem ichitaro linux • justsystem ichitaro lite2

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References