« Volver al listado

CVE-2014-0810

Estado: ModificadaAlta (7.5)—

Unspecified vulnerability in JustSystems Sanshiro 2007 before update 3, 2008 before update 5, 2009 before update 6, and 2010 before update 6, and Sanshiro Viewer before 2.0.2.0, allows remote attackers to execute arbitrary code via a crafted document.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Justsystems — Sanshiro

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-0810",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": true,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-01-29T05:37:02.857",
  "references": [
    {
      "url": "http://jvn.jp/en/jp/JVN28011378/index.html",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000011",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://www.justsystems.com/jp/info/js14001.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "http://jvn.jp/en/jp/JVN28011378/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000011",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.justsystems.com/jp/info/js14001.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in JustSystems Sanshiro 2007 before update 3, 2008 before update 5, 2009 before update 6, and 2010 before update 6, and Sanshiro Viewer before 2.0.2.0, allows remote attackers to execute arbitrary code via a crafted document."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en JustSystems Sanshiro 2007 anterior a la actualización 3, 2008 anterior a la actualización 5, 2009 anterior a la actualización 6, 6 2010 anterior a la actualización 6, y Sanshiro Viewer anterior a la versión 2.0.2.0, permite a atacantes remotos ejecutar código arbitrario a través de un documento manipulado."
    }
  ],
  "lastModified": "2026-06-17T00:03:40.070",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:justsystems:sanshiro:2007:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21531AF2-FE6B-4233-A41A-2D9D4B782DCA"
            },
            {
              "criteria": "cpe:2.3:a:justsystems:sanshiro:2008:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "442C5E61-39FC-4EB8-9362-52E33E1ACCF6"
            },
            {
              "criteria": "cpe:2.3:a:justsystems:sanshiro:2009:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "531479D1-2746-4245-A6B5-639D6BD1A3AB"
            },
            {
              "criteria": "cpe:2.3:a:justsystems:sanshiro:2010:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BBFE8BB-7DBE-4361-950B-1DFBDA06F96F"
            },
            {
              "criteria": "cpe:2.3:a:justsystems:sanshiro:viewer:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1DC630DC-0FFD-4283-84DF-7B7BA5298B11"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp"
}