Published:2005/04/22 Last Updated:2008/05/21

JVN#A7DA6818

WebUD arbitrary program execution vulnerability

Overview

WebUD, a web accessibility support tool, contains a vulnerability in its components that are automatically executed on it, which may allow execution of arbitrary code when a user accesses a malicious website.

Products Affected

WebUD version V01L10

Description

Impact

A remote attacker could execute an arbitrary program, or read or overwrite user's files.

Solution

Vendor Status

Vendor	Status	Last Update	Vendor Notes
FUJITSU LIMITED	Vulnerable	2005/10/04

References

JPCERT/CC Addendum

Credit

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE
JVN iPedia	JVNDB-2005-000767

JVN#A7DA6818 WebUD arbitrary program execution vulnerability