Back to KEVs

CVE-2007-4246

Unspecified vulnerability, possibly a buffer overflow, in Justsystem Ichitaro 2007 and earlier allows remote attackers to execute arbitrary code...

Basic Information

CVE State
PUBLISHED
Reserved Date
August 08, 2007
Published Date
August 08, 2007
Last Updated
August 07, 2024
Vendor
Justsystem
Product
Ichitaro
Description
Unspecified vulnerability, possibly a buffer overflow, in Justsystem Ichitaro 2007 and earlier allows remote attackers to execute arbitrary code via a modified document, as actively exploited in August 2007 by malware such as Tarodrop.D (Tarodrop.Q), a different vulnerability than CVE-2006-4326, CVE-2006-5424, CVE-2006-6400, and CVE-2007-1938.

CVSS Scores

CVSS v2.0

6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploit Status

Exploited in the Wild
Yes (2007-08-08 23:00:00 UTC) Source

References

http://www.symantec.com/enterprise/security_response/weblog/2007/08/unknown_exploit_compromises_ic.html https://exchange.xforce.ibmcloud.com/vulnerabilities/35822 http://www.vupen.com/english/advisories/2007/2780 http://www.securityfocus.com/bid/25187 http://www.symantec.com/security_response/writeup.jsp?docid=2007-080210-4815-99 http://osvdb.org/39393 http://www.justsystem.co.jp/info/pd7003.html http://secunia.com/advisories/26317

Known Exploited Vulnerability Information

Source Added Date
CVE 2007-08-08 23:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel