CVE-2007-6436 Stack-based buffer overflow in JSGCI.DLL in JustSystems Ichitaro 2005, 2006, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted document, as actively exploited in D...
HighCVSS 9.3
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in JSGCI.DLL in JustSystems Ichitaro 2005, 2006, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted document, as actively exploited in December 2007 by the Tarodrop.F trojan. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| justsystem ichitaro | = 2005 | No fix listed |
| justsystem ichitaro | = 2006 | No fix listed |
| justsystem ichitaro | = 2007 | No fix listed |
References
- 27992 third-party-advisory vendor-advisory
- 39395 vdb-entry
- www.symantec.com
- ADV-2007-4213 vdb-entry
- justsystems-jsgci-bo(39025) vdb-entry