JVN#17293765 Ichitaro series vulnerable to arbitrary code execution

Overview

The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution.

This vulnerability is different from JVN#98467259.

Products Affected

Ichitaro
Ichitaro Government
Just School

For more information, refer to the developer's website.

Description

The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution.

Impact

When opening a specially crafted file locally or through a website, an attacker may be able to execute arbitrary code.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Vendor Status

Vendor	Link
JustSystems Corporation	Vulnerability in Ichitaro may allow arbitrary code execution. (Japanese Only)

References

IPA
Security Alert for Vulnerability in the Ichitaro Series

JPCERT/CC Addendum

Credit

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE	CVE-2010-2152
JVN iPedia	JVNDB-2010-000024