VULNERABILITY INTELLIGENCE

CVE-2007-5687

CVSS score9.3 NONE
EPSS probability5.74%
CISA KEVNot currently listed
Published2007-10-28
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long (1) pard field or (2) font name in the fcharset0 field, which is not properly handled in (a) JSTARO4.OCX; or (3) a long title, which is not properly handled by (b) TJSVDA.DLL.

Weakness classification

  • nvd@nist.gov: CWE-119

Primary references