Skip to main content

Ichitaro CVE-2014-7247

CRITICAL
Data Processing Errors (CWE-19)
2014-11-26 vultures@jpcert.or.jp
RCE Ichitaro Ichitaro Pro
10.0
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
10.0 CRITICAL
AV:N/AC:L/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:C/A:C
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C

Lifecycle Timeline

1
CVE Published
Nov 26, 2014 - 02:59 cve.org
CRITICAL 10.0

DescriptionCVE.org

Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file.

AnalysisAI

Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-19. Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file. Affected products include: Justsystems Ichitaro, Justsystems Ichitaro Pro. Version information: through 2011.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Ichitaro

View all
CVE-2013-3644 CRITICAL
10.0 Jun 18

Unspecified vulnerability in JustSystems Ichitaro 2006 through 2013; Ichitaro Pro through 2; Ichitaro Government 6, 7, a
CVE-2012-0269 CRITICAL
9.3 Apr 27

Buffer overflow in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ich
CVE-2013-5990 CRITICAL
9.3 Nov 13

Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ic
CVE-2013-0707 CRITICAL
9.3 Mar 01

Unspecified vulnerability in JustSystems Ichitaro 2006 and 2007, Ichitaro Government 2006 and 2007, Ichitaro Portable wi
CVE-2017-2790 HIGH
8.8 Feb 24

When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls), JustSystems Ichitaro Office trus
CVE-2017-2789 HIGH
8.8 Feb 24

When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how m
CVE-2014-2003 HIGH
7.6 Jun 16

JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatur
CVE-2017-2791 HIGH
7.5 Feb 24

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint

CVE-2012-1242 MEDIUM
6.9 Apr 27

Untrusted search path vulnerability in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 20

Same weakness CWE-19 – Data Processing Errors

View all
CVE-2012-5357 CRITICAL POC
9.8
CVE-2016-4977 HIGH POC
8.8
CVE-2015-5374 HIGH POC
7.8
CVE-2015-5477 HIGH POC
7.8
CVE-2016-3236 CRITICAL POC
9.8
CVE-2015-0097 CRITICAL POC
9.3
CVE-2015-0081 CRITICAL POC
9.3
CVE-2014-8598 MEDIUM POC
6.4

Same technique RCE

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8

Share

CVE-2014-7247 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy