CVEvulnerability

CVE-2014-2003

7.6 HIGH Published 2014-06-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-06-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and execute arbitrary code via a crafted signature.

Affected configurations

• justsystems ichitaro (<= 2014) • justsystems ichitaro 10 • justsystems ichitaro 11 • justsystems ichitaro 12 • justsystems ichitaro 13 • justsystems ichitaro 2004 • justsystems ichitaro 2005 • justsystems ichitaro 2006 • justsystems ichitaro 2007 • justsystems ichitaro 2008 • justsystems ichitaro 2009 • justsystems ichitaro 2010 • justsystems ichitaro 2011 • justsystems ichitaro 2012 • justsystems ichitaro 2013 • justsystems just online update

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References