CVE-2014-7247
Estado: ModificadaAlta (10)—
Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 10
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 5.33%
- Percentil entre todas las CVEs puntuadas: 92
- Fecha de la puntuación: 2/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-19
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2014-7247",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "vultures@jpcert.or.jp",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2014-11-26T02:59:02.637",
"references": [
{
"url": "http://jvn.jp/en/jp/JVN16318793/index.html",
"tags": [
"Vendor Advisory"
],
"source": "vultures@jpcert.or.jp"
},
{
"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131",
"tags": [
"Vendor Advisory"
],
"source": "vultures@jpcert.or.jp"
},
{
"url": "http://www.justsystems.com/jp/info/js14003.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "vultures@jpcert.or.jp"
},
{
"url": "http://jvn.jp/en/jp/JVN16318793/index.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.justsystems.com/jp/info/js14003.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-19"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en JustSystems Ichitaro 2008 hasta 2011; Ichitaro Government 6, 7, 2008, 2009, y 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; y Ichitaro 2014 Tetsu permite a atacantes remotos ejecutar código arbitrario a través de un fichero manipulado."
}
],
"lastModified": "2026-06-17T00:14:37.493",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:justsystems:ichitaro:6:*:government:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "200F0514-22F5-42A1-BBE6-9F8FE35D0C7B"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro:7:*:government:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7958FBA3-C4E5-464B-BE73-DDC26FA003CB"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro:2008:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B8FAFF2-94AD-4C8B-8B10-57651DEA6191"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro:2008:*:government:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A358E678-D446-44D6-A14B-C53ABE9D4399"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro:2009:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12205BDB-6DD6-46B8-891B-E4EAAB8F3588"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro:2009:*:government:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFE28E8A-8633-4C3B-A6D0-C7A46E39500F"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro:2010:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9C3EDDB-E30F-45BA-94C4-5C917283971E"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro:2010:*:government:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15F3A9BD-622B-41DC-BB6A-D33C349F01AE"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro:2011:*:sou:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3158006-A67C-4F76-A235-A9EA142C31C1"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro:2012:-:shou:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EE20B2C-6630-4362-9438-91571BD531B6"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro:2013:-:gen:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DF9AE8E-A943-49AF-A507-4423ADC8796C"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro:2014:-:*:*:tetsu:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12FF0771-1475-4F22-9CFD-997EC6030087"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro:2014:-:*:*:tetsu_trial:*:*:*",
"vulnerable": true,
"matchCriteriaId": "396E4DE7-0F55-45E3-8269-DE0835C0F3BD"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro_pro:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "242FF195-E6D8-4C22-B03E-00775A8ED5A7"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro_pro:2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "115DF4BA-D8CE-4557-9C83-8B51999E9446"
},
{
"criteria": "cpe:2.3:a:justsystems:ichitaro_pro:2:*:trial:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF10D9D2-9D3B-4D54-A8E4-DEABB2D8C159"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "vultures@jpcert.or.jp"
}