CVE-2011-1331
JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro Viewer allow remote attackers to execute arbitrary code or cause a denial of service (heap memory…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.56%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro Viewer allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document, as exploited in the wild in early 2011.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 5.56% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- justsystems/ichitaro · justsystems/ichitaro portable · justsystems/ichitaro pro · justsystems/ichitaro viewer
- Source
- vultures@jpcert.or.jp
References
- http://jvn.jp/en/jp/JVN87239473/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000043
- http://secunia.com/advisories/44956Vendor Advisory
- http://www.justsystems.com/jp/info/js11001.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/48283
- http://www.symantec.com/connect/blogs/targeted-attacks-2011-using-ichitaro-zero-day-vulnerabilityExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68072
- http://jvn.jp/en/jp/JVN87239473/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000043
- http://secunia.com/advisories/44956Vendor Advisory
- http://www.justsystems.com/jp/info/js11001.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/48283
- http://www.symantec.com/connect/blogs/targeted-attacks-2011-using-ichitaro-zero-day-vulnerabilityExploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68072
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.