CVEvulnerability
CVE-2011-1331
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-07-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro Viewer allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document, as exploited in the wild in early 2011.
Affected configurations
• justsystems ichitaro 6
• justsystems ichitaro 2005
• justsystems ichitaro 2006
• justsystems ichitaro 2007
• justsystems ichitaro 2008
• justsystems ichitaro 2009
• justsystems ichitaro 2010
• justsystems ichitaro 2011
• justsystems ichitaro portable
• justsystems ichitaro pro
• justsystems ichitaro viewer
• justsystems ichitaro viewer 5.1.3.0
• justsystems ichitaro viewer 19.0.1.0
• justsystems ichitaro viewer 19.0.2.0
• justsystems ichitaro viewer 19.0.3.0
• justsystems ichitaro viewer 20.0.2.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://jvn.jp/en/jp/JVN87239473/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000043 jvndb.jvn.jp
- http://secunia.com/advisories/44956 Vendor Advisory
- http://www.justsystems.com/jp/info/js11001.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/48283 www.securityfocus.com
- http://www.symantec.com/connect/blogs/targeted-attacks-2011-using-ichitaro-zero-day-vulnerability Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68072 exchange.xforce.ibmcloud.com
- http://jvn.jp/en/jp/JVN87239473/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000043 jvndb.jvn.jp
- http://secunia.com/advisories/44956 Vendor Advisory
- http://www.justsystems.com/jp/info/js11001.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/48283 www.securityfocus.com
- http://www.symantec.com/connect/blogs/targeted-attacks-2011-using-ichitaro-zero-day-vulnerability Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68072 exchange.xforce.ibmcloud.com