KLA10217 ACE vulnerability in Ichitaro

An unspecified vulnerability was found in JustSystem Ichitaro. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed document.

Original advisories

JustSystems bulletin

Related products

Ichitaro-viewer

Ichitaro-Pro

Ichitaro-Government

CVE list

CVE-2013-5990 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Ichitaro version 2013 updates 4 and earlierIchitaro version 2012 updates 4 and earlierIchitaro version 2011 updates 7 and earlierIchitaro Pro2,Ichitaro Government version 7 updates 4 and earlierIchitaro Pro, Ichitaro Government version 6 updates 9 and earlierIchitaro Discover, Ichitaro version 2010 updates 8 and earlierIchitaro Government version 2010 updates 5 and earlierIchitaro Government, Ichitaro Discover, Ichitaro version 2009 updates 9 and earlierIchitaro Government, Ichitaro Discover, Ichitaro version 2008 updates 13 and earlierIchitaro Government, Ichitaro version 2007 updates 13 and earlierIchitaro Government, Ichitaro version 2006 updates 10 and earlierIchitaro portable with oreplug updates 5 and earlier Ichitaro viewers versions of day 25-07-2013 and earlier