« Volver al listado

CVE-2006-4326

Estado: ModificadaAlta (7.5)—

Stack-based buffer overflow in Justsystem Ichitaro 9.x through 13.x, Ichitaro 2004, 2005, 2006, and Government 2006; Ichitaro for Linux; and FormLiner before 20060818 allows remote attackers to execute arbitrary code via long Unicode strings in a crafted document, as being actively exploited by malware such as Trojan.Tarodrop. NOTE: some details are obtained from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Justsystem — FormlinerJustsystem — IchitaroJustsystem — Ichitaro Government

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-4326",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-08-24T01:04:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/21552",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.justsystem.co.jp/info/pd6002.html",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/19550",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.symantec.com/enterprise/security_response/weblog/2006/08/justsystems_ichitaro_0day_used.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-081615-5201-99",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3332",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28484",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/21552",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.justsystem.co.jp/info/pd6002.html",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/19550",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.symantec.com/enterprise/security_response/weblog/2006/08/justsystems_ichitaro_0day_used.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-081615-5201-99",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3332",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28484",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in Justsystem Ichitaro 9.x through 13.x, Ichitaro 2004, 2005, 2006, and Government 2006; Ichitaro for Linux; and FormLiner before 20060818 allows remote attackers to execute arbitrary code via long Unicode strings in a crafted document, as being actively exploited by malware such as Trojan.Tarodrop.  NOTE: some details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer basado en pila en Justsystem Ichitaro 9.x hasta 13.x, Ichitaro 2004, 2005, 2006, y Government 2006; Ichitaro para Linux; y FormLiner anterior al 18/08/2006 permite a ataacntes remotos ejecutar código de su elección mediante cadenas Unicode largas en un documento manipulado, tal y como está siendo explotado activamente por software malicioso como Trojan.Tarodrop. NOTA: algunos detalles se han obtenido de información de terceros."
    }
  ],
  "lastModified": "2026-06-16T22:28:51.637",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:justsystem:formliner:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1271BA13-118F-45C5-ADCD-845AF16727D0"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "042BB9E2-6536-4BA0-804C-530EF548E387"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44D0935F-D5F8-4D95-A483-036660B498F7"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69A39F16-968A-48E9-907F-36133B6775D9"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:12.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FDC262B5-28BE-4EC6-89CC-B013A15CB10C"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:13.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72EFC88E-B6D1-4B8A-ADDD-5B2EF6523FEC"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:2004:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF08B2B3-8387-4A91-8866-4C9555901D0C"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:2005:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4125282-F81C-45E4-B5A3-D5685A859455"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro:2006:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "038FB1DB-00F3-4761-A6F4-551360CF7983"
            },
            {
              "criteria": "cpe:2.3:a:justsystem:ichitaro_government:2006:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "957BEBB5-8DAD-427A-936D-6AB1362B33AC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}