CVE-2006-6400

Published: Dec 10, 2006Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Buffer overflow in JustSystems Hanako 2004 through 2006, Hanako viewer 1.x, Ichitaro 2004, Ichitaro 2005, Ichitaro Lite2, Ichitaro viewer 4.x, and Sanshiro 2005 allows remote attackers to execute arbitrary code via the (1) Keyword and (2) Title fields, related to string length fields.

Affected (11)

Products: Justsystem: Hanako, Hanako Viewer, Ichitaro, Ichitaro Lite2, Ichitaro Viewer, Sanshiro

6 products

Ichitaro Viewer

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Justsystem Hanako	Version 2004
Justsystem Hanako	Version 2005
Justsystem Hanako	Version 2006
Justsystem Hanako Viewer	Version 1.0
Justsystem Ichitaro	All versions
Justsystem Ichitaro	Version 2005
Justsystem Ichitaro	Version 2006
Justsystem Ichitaro Lite2	All versions
Justsystem Ichitaro Lite2	Version r2
Justsystem Ichitaro Viewer	Version 4.0
Justsystem Sanshiro	Version 2005

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (14)

http://jvn.jp/jp/JVN%2347272891/index.html

Source: cve@mitre.org

http://secunia.com/advisories/23185

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1017336

Source: cve@mitre.org

http://www.justsystem.co.jp/info/pd6005.html

Source: cve@mitre.org

http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/92_e.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/21445

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4857

Source: cve@mitre.org

http://jvn.jp/jp/JVN%2347272891/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/23185

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1017336

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.justsystem.co.jp/info/pd6005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/92_e.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/21445

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/4857

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.