« Volver al listado

CVE-2007-5687

Estado: ModificadaAlta (9.3)—

Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long (1) pard field or (2) font name in the fcharset0 field, which is not properly handled in (a) JSTARO4.OCX; or (3) a long title, which is not properly handled by (b) TJSVDA.DLL.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Justsystem — Ichitaro

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-5687",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-10-28T17:08:00.000",
  "references": [
    {
      "url": "http://jvn.jp/jp/JVN%2329211062/index.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://jvn.jp/jp/JVN%2332981509/index.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://jvn.jp/jp/JVN%2350495547/index.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/39394",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/27393",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071025-1",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071025-2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071025-3",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ipa.go.jp/security/vuln/200710_Ichitaro.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.justsystems.com/jp/info/pd7004.html",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/26206",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/3623",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38129",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38130",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://jvn.jp/jp/JVN%2329211062/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvn.jp/jp/JVN%2332981509/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvn.jp/jp/JVN%2350495547/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/39394",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/27393",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071025-1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071025-2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071025-3",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ipa.go.jp/security/vuln/200710_Ichitaro.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.justsystems.com/jp/info/pd7004.html",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/26206",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/3623",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38129",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38130",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long (1) pard field or (2) font name in the fcharset0 field, which is not properly handled in (a) JSTARO4.OCX; or (3) a long title, which is not properly handled by (b) TJSVDA.DLL."
    },
    {
      "lang": "es",
      "value": "Múltiples desbordamientos de búfer en la funcionalidad de procesamiento de texto enriquecido en el JustSystems Ichitaro 2004 hasta el 2007, el 11 hasta el 13 y otras versiones, permiten a atacantes remotos ejecutar código de su elección a través de la inserción de (1) un largo en el parámetro pard o (2) un nombre de fuente largo en el campo fcharset0, lo que no es correctamente manejado en el (a) JSTARO4.OCX; o (3) un título largo, lo que no es correctamente manejado por el (b) TJSVDA.DLL."
    }
  ],
  "lastModified": "2026-06-16T22:46:37.987",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69A39F16-968A-48E9-907F-36133B6775D9"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:12.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FDC262B5-28BE-4EC6-89CC-B013A15CB10C"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:13.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72EFC88E-B6D1-4B8A-ADDD-5B2EF6523FEC"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:2004:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF08B2B3-8387-4A91-8866-4C9555901D0C"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:2005:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4125282-F81C-45E4-B5A3-D5685A859455"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:2006:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "038FB1DB-00F3-4761-A6F4-551360CF7983"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:linux:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D42AF9B5-D9C7-435B-8FE7-B2DB39CDACC0"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:lite2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D47648C1-CF81-4C0E-91DE-0773C13AA4D9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}