← Back

CVE-2014-2003

nvd nist
Published: Jun 16, 2014Modified: May 6, 2026

JSON object

Loading...
7.6
Vector
AV:N/AC:H/Au:N/C:C/I:C/A:C
Exploitability: 4.9 / Impact: 10.0
Source: NVD

Description

JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and execute arbitrary code via a crafted signature.

Affected (24)

Justsystems
2 products
Ichitaro
Just Online Update
Configuration A
24 vulnerable
Vulnerable SoftwareAffected Versions
Justsystems
Ichitaro
Up to 2014
Ichitaro
Version 10
Ichitaro
Version 11
Ichitaro
Version 12
Ichitaro
Version 13
Ichitaro
Version 2004
Ichitaro
Version 2005
Ichitaro
Version 2006
Ichitaro
Version 2006
Ichitaro
Version 2007
Ichitaro
Version 2007
Ichitaro
Version 2008
Ichitaro
Version 2008
Ichitaro
Version 2009
Ichitaro
Version 2009
Ichitaro
Version 2009
Ichitaro
Version 2010
Ichitaro
Version 2010
Ichitaro
Version 2011
Ichitaro
Version 2011
Ichitaro
Version 2012
Ichitaro
Version 2013
Ichitaro
Version 2013
Just Online Update
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.