PT-2014-7853
CVE-2014-7247
·
Publicado
2014-11-26
·
Atualizado
2015-02-24
Descrição por
CVSS 2.0
10
AltaMétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
JustSystems Ichitaro versions 2008 through 2011
JustSystems Ichitaro Government versions 6, 7, 2008, 2009, and 2010
JustSystems Ichitaro Pro
JustSystems Ichitaro Pro 2
JustSystems Ichitaro 2011 Sou
JustSystems Ichitaro 2012 Shou
JustSystems Ichitaro 2013 Gen
JustSystems Ichitaro 2014 Tetsu
Description
The issue allows remote attackers to execute arbitrary code via a crafted file.
Recommendations
For JustSystems Ichitaro versions 2008 through 2011, avoid using the software to open crafted files until a fix is available.
For JustSystems Ichitaro Government versions 6, 7, 2008, 2009, and 2010, restrict access to the software to minimize the risk of exploitation.
For JustSystems Ichitaro Pro, JustSystems Ichitaro Pro 2, JustSystems Ichitaro 2011 Sou, JustSystems Ichitaro 2012 Shou, JustSystems Ichitaro 2013 Gen, and JustSystems Ichitaro 2014 Tetsu, consider disabling the software until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾