What is the CVSS score of CVE-2013-5990?

CVE-2013-5990 has a CVSS 2.0 base score of 9.3 (Critical). CVSS vector: AV:N/AC:M/Au:N/C:C/I:C/A:C. EPSS exploitation probability: 5.1%.

Is there a patch available for CVE-2013-5990?

Yes, a patch is available for CVE-2013-5990. Update the affected software to the latest version immediately.

Ichitaro Pro CVE-2013-5990

CRITICAL

2013-11-13 vultures@jpcert.or.jp

RCE Ichitaro Pro Ichitaro Portable With Oreplug Ichitaro Ichitaro Viewer

9.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

9.3 CRITICAL

AV:N/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Nov 13, 2013 - 15:55 cve.org

CRITICAL 9.3

DescriptionCVE.org

AnalysisAI

Technical ContextAI

Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen and Gen Trial Edition; Ichitaro Pro; Ichitaro Pro 2 and Pro 2 Trial Edition; Ichitaro Viewer; and Ichitaro Portable with oreplug allows remote attackers to execute arbitrary code via a crafted document. Affected products include: Justsystems Ichitaro Pro, Justsystems Ichitaro Portable With Oreplug, Justsystems Ichitaro, Justsystems Ichitaro Viewer. Version information: through 2011.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.