Skip to main content

Ichitaro

10 CVEs product

Monthly

CVE-2017-2791 Feb 24, 22:59 HIGH This Week

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Buffer Overflow Ichitaro Justsystems
NVD
CVSS 3.0
7.5
EPSS
0.4%
CVE-2017-2790 Feb 24, 22:59 HIGH This Week

When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls), JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Microsoft Ichitaro Justsystems
NVD
CVSS 3.0
8.8
EPSS
1.5%
CVE-2017-2789 Feb 24, 22:59 HIGH This Week

When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy from the document. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Microsoft Ichitaro Justsystems
NVD
CVSS 3.0
8.8
EPSS
1.5%
CVE-2014-7247 Nov 26, 02:59 CRITICAL PATCH Act Now

Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.

RCE Ichitaro Ichitaro Pro Justsystems
NVD
CVSS 2.0
10.0
EPSS
6.0%
CVE-2014-2003 Jun 16, 14:55 HIGH This Week

JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Ichitaro Just Online Update Justsystems
NVD
CVSS 2.0
7.6
EPSS
5.4%
CVE-2013-5990 Nov 13, 15:55 CRITICAL PATCH Act Now

Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen and Gen Trial Edition;. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable.

RCE Ichitaro Ichitaro Viewer Ichitaro Pro Ichitaro Portable With Oreplug +1
NVD
CVSS 2.0
9.3
EPSS
5.1%
CVE-2013-3644 Jun 18, 18:55 CRITICAL Act Now

Unspecified vulnerability in JustSystems Ichitaro 2006 through 2013; Ichitaro Pro through 2; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro Portable with oreplug; Ichitaro Viewer; and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 11.7% and no vendor patch available.

RCE Ichitaro Ichitaro Viewer Ichitaro Portable Ichitaro Just School +1
NVD
CVSS 2.0
10.0
EPSS
11.7%
CVE-2013-0707 Mar 01, 05:40 CRITICAL PATCH Act Now

Unspecified vulnerability in JustSystems Ichitaro 2006 and 2007, Ichitaro Government 2006 and 2007, Ichitaro Portable with oreplug, Hanako 2006 through 2013, Hanako Police, Hanako Police 3, and. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable.

RCE Ichitaro Hanako Ichitaro Portable Hanako Police +2
NVD
CVSS 2.0
9.3
EPSS
3.5%
CVE-2012-1242 Apr 27, 18:55 MEDIUM This Month

Untrusted search path vulnerability in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School,. Rated medium severity (CVSS 6.9). No vendor patch available.

Information Disclosure Ichitaro Ichitaro Viewer Just School Ichitaro Portable With Oreplug +4
NVD
CVSS 2.0
6.9
EPSS
0.1%
CVE-2012-0269 Apr 27, 18:55 CRITICAL Act Now

Buffer overflow in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Ichitaro Ichitaro Viewer Just School +9
NVD
CVSS 2.0
9.3
EPSS
7.5%
EPSS 0% CVSS 7.5
HIGH This Week

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Buffer Overflow Ichitaro +1
NVD
EPSS 1% CVSS 8.8
HIGH This Week

When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls), JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Microsoft +2
NVD
EPSS 1% CVSS 8.8
HIGH This Week

When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy from the document. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Microsoft +2
NVD
EPSS 6% CVSS 10.0
CRITICAL PATCH Act Now

Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.

RCE Ichitaro Ichitaro Pro +1
NVD
EPSS 5% CVSS 7.6
HIGH This Week

JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

RCE Ichitaro Just Online Update +1
NVD
EPSS 5% CVSS 9.3
CRITICAL PATCH Act Now

Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen and Gen Trial Edition;. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable.

RCE Ichitaro Ichitaro Viewer +3
NVD
EPSS 12% CVSS 10.0
CRITICAL Act Now

Unspecified vulnerability in JustSystems Ichitaro 2006 through 2013; Ichitaro Pro through 2; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro Portable with oreplug; Ichitaro Viewer; and. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 11.7% and no vendor patch available.

RCE Ichitaro Ichitaro Viewer +3
NVD
EPSS 4% CVSS 9.3
CRITICAL PATCH Act Now

Unspecified vulnerability in JustSystems Ichitaro 2006 and 2007, Ichitaro Government 2006 and 2007, Ichitaro Portable with oreplug, Hanako 2006 through 2013, Hanako Police, Hanako Police 3, and. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable.

RCE Ichitaro Hanako +4
NVD
EPSS 0% CVSS 6.9
MEDIUM This Month

Untrusted search path vulnerability in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School,. Rated medium severity (CVSS 6.9). No vendor patch available.

Information Disclosure Ichitaro Ichitaro Viewer +6
NVD
EPSS 7% CVSS 9.3
CRITICAL Act Now

Buffer overflow in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST School 2009 and. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Ichitaro +11
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy