CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-2003

JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and execute arbitrary code via a crafted signature.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.064

EPSS Ranking 90.6%

CVSS Severity

CVSS v2 Score 7.6

References

Products affected by CVE-2014-2003

Justsystems » Ichitaro » Version: 10

cpe:2.3:a:justsystems:ichitaro:10
Justsystems » Ichitaro » Version: 11

cpe:2.3:a:justsystems:ichitaro:11
Justsystems » Ichitaro » Version: 12

cpe:2.3:a:justsystems:ichitaro:12
Justsystems » Ichitaro » Version: 13

cpe:2.3:a:justsystems:ichitaro:13
Justsystems » Ichitaro » Version: 2004

cpe:2.3:a:justsystems:ichitaro:2004
Justsystems » Ichitaro » Version: 2005

cpe:2.3:a:justsystems:ichitaro:2005
Justsystems » Ichitaro » Version: 2006

cpe:2.3:a:justsystems:ichitaro:2006
Justsystems » Ichitaro » Version: 2007

cpe:2.3:a:justsystems:ichitaro:2007
Justsystems » Ichitaro » Version: 2008

cpe:2.3:a:justsystems:ichitaro:2008
Justsystems » Ichitaro » Version: 2009

cpe:2.3:a:justsystems:ichitaro:2009
Justsystems » Ichitaro » Version: 2010

cpe:2.3:a:justsystems:ichitaro:2010
Justsystems » Ichitaro » Version: 2011

cpe:2.3:a:justsystems:ichitaro:2011
Justsystems » Ichitaro » Version: 2012

cpe:2.3:a:justsystems:ichitaro:2012
Justsystems » Ichitaro » Version: 2013

cpe:2.3:a:justsystems:ichitaro:2013
Justsystems » Ichitaro » Version: 2014

cpe:2.3:a:justsystems:ichitaro:2014
Justsystems » Ichitaro » Version: 6

cpe:2.3:a:justsystems:ichitaro:6
Justsystems » Ichitaro » Version: 7

cpe:2.3:a:justsystems:ichitaro:7
Justsystems » Just Online Update » Version: N/A

cpe:2.3:a:justsystems:just_online_update:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-2003

Products

Pricing

Contact Us