CVE-2006-0807
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
89.2%
Stack-based buffer overflow in NJStar Chinese and Japanese Word Processor 4.x and 5.x before 5.10 allows user-assisted attackers to execute arbitrary code via font names in NJStar (.njx) documents.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| njstar | chinese_word_processor | * | cpe:2.3:a:njstar:chinese_word_processor:*:*:*:*:*:*:*:* |
| njstar | japanese_word_processor | * | cpe:2.3:a:njstar:japanese_word_processor:*:*:*:*:*:*:*:* |
References
secunia.com/advisories/18702
secunia.com/secunia_research/2006-5/advisory/
securityreason.com/securityalert/461
securitytracker.com/id?1015649
www.njstar.com/njstar/chinese/
www.njstar.com/njstar/japanese/
www.osvdb.org/23354
www.securityfocus.com/archive/1/425498/100/0/threaded
www.securityfocus.com/bid/16737
www.vupen.com/english/advisories/2006/0670
exchange.xforce.ibmcloud.com/vulnerabilities/24773
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
89.2%