CVE-2007-5687
N/A
Published: October 28, 2007 at 04:00 PM UTC
Updated: June 16, 2026 at 10:46 PM UTC
1 product affected across 1 vendorIchitaro
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 6%
Description
Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long (1) pard field or (2) font name in the fcharset0 field, which is not properly handled in (a) JSTARO4.OCX; or (3) a long title, which is not properly handled by (b) TJSVDA.DLL.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (14)
Third Party Advisoryx_refsource_JVN
Source: [email protected]
http://jvn.jp/jp/JVN%2329211062/index.htmlThird Party Advisoryx_refsource_JVN
Source: [email protected]
http://jvn.jp/jp/JVN%2332981509/index.htmlThird Party Advisoryx_refsource_JVN
Source: [email protected]
http://jvn.jp/jp/JVN%2350495547/index.htmlThird Party Advisoryx_refsource_SECUNIAPatchVendor Advisory
Source: [email protected]
http://secunia.com/advisories/27393x_refsource_MISC
Source: [email protected]
http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071025-1x_refsource_MISC
Source: [email protected]
http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071025-2x_refsource_MISC
Source: [email protected]
http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071025-3Quick Info
StatusMODIFIED
CWE
CWE-119
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card