Vulnerability-Lookup

CVE-2014-7247 (GCVE-0-2014-7247)

Vulnerability from cvelistv5 – Published: 2014-11-26 02:00 – Updated: 2024-08-06 12:40

Summary

Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file.

Severity

No CVSS data available.

CWE

Assigner

jpcert jpcert root

References

3 references

URL	Tags
http://jvn.jp/en/jp/JVN16318793/index.html	third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131	third-party-advisoryx_refsource_JVNDB
http://www.justsystems.com/jp/info/js14003.html	x_refsource_CONFIRM

Date Public

2014-11-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T12:40:19.217Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "JVN#16318793",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN16318793/index.html"
          },
          {
            "name": "JVNDB-2014-000131",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.justsystems.com/jp/info/js14003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-11-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2014-11-26T02:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "name": "JVN#16318793",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN16318793/index.html"
        },
        {
          "name": "JVNDB-2014-000131",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.justsystems.com/jp/info/js14003.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2014-7247",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "JVN#16318793",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN16318793/index.html"
            },
            {
              "name": "JVNDB-2014-000131",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131"
            },
            {
              "name": "http://www.justsystems.com/jp/info/js14003.html",
              "refsource": "CONFIRM",
              "url": "http://www.justsystems.com/jp/info/js14003.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2014-7247",
    "datePublished": "2014-11-26T02:00:00.000Z",
    "dateReserved": "2014-09-30T00:00:00.000Z",
    "dateUpdated": "2024-08-06T12:40:19.217Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2014-7247",
      "date": "2026-09-19",
      "epss": "0.05335",
      "percentile": "0.92247"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro:6:*:government:*:*:*:*:*",
                  "matchCriteriaId": "200F0514-22F5-42A1-BBE6-9F8FE35D0C7B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro:7:*:government:*:*:*:*:*",
                  "matchCriteriaId": "7958FBA3-C4E5-464B-BE73-DDC26FA003CB",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro:2008:*:*:*:*:*:*:*",
                  "matchCriteriaId": "8B8FAFF2-94AD-4C8B-8B10-57651DEA6191",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro:2008:*:government:*:*:*:*:*",
                  "matchCriteriaId": "A358E678-D446-44D6-A14B-C53ABE9D4399",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro:2009:*:*:*:*:*:*:*",
                  "matchCriteriaId": "12205BDB-6DD6-46B8-891B-E4EAAB8F3588",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro:2009:*:government:*:*:*:*:*",
                  "matchCriteriaId": "DFE28E8A-8633-4C3B-A6D0-C7A46E39500F",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro:2010:*:*:*:*:*:*:*",
                  "matchCriteriaId": "C9C3EDDB-E30F-45BA-94C4-5C917283971E",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro:2010:*:government:*:*:*:*:*",
                  "matchCriteriaId": "15F3A9BD-622B-41DC-BB6A-D33C349F01AE",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro:2011:*:sou:*:*:*:*:*",
                  "matchCriteriaId": "F3158006-A67C-4F76-A235-A9EA142C31C1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro:2012:-:shou:*:*:*:*:*",
                  "matchCriteriaId": "6EE20B2C-6630-4362-9438-91571BD531B6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro:2013:-:gen:*:*:*:*:*",
                  "matchCriteriaId": "2DF9AE8E-A943-49AF-A507-4423ADC8796C",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro:2014:-:*:*:tetsu:*:*:*",
                  "matchCriteriaId": "12FF0771-1475-4F22-9CFD-997EC6030087",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro:2014:-:*:*:tetsu_trial:*:*:*",
                  "matchCriteriaId": "396E4DE7-0F55-45E3-8269-DE0835C0F3BD",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro_pro:-:*:*:*:*:*:*:*",
                  "matchCriteriaId": "242FF195-E6D8-4C22-B03E-00775A8ED5A7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro_pro:2:*:*:*:*:*:*:*",
                  "matchCriteriaId": "115DF4BA-D8CE-4557-9C83-8B51999E9446",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:justsystems:ichitaro_pro:2:*:trial:*:*:*:*:*",
                  "matchCriteriaId": "BF10D9D2-9D3B-4D54-A8E4-DEABB2D8C159",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file."
        },
        {
          "lang": "es",
          "value": "Vulnerabilidad no especificada en JustSystems Ichitaro 2008 hasta 2011; Ichitaro Government 6, 7, 2008, 2009, y 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; y Ichitaro 2014 Tetsu permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de un fichero manipulado."
        }
      ],
      "id": "CVE-2014-7247",
      "lastModified": "2024-11-21T02:16:36.310",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 10.0,
              "confidentialityImpact": "COMPLETE",
              "integrityImpact": "COMPLETE",
              "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 10.0,
            "impactScore": 10.0,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2014-11-26T02:59:02.637",
      "references": [
        {
          "source": "vultures@jpcert.or.jp",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://jvn.jp/en/jp/JVN16318793/index.html"
        },
        {
          "source": "vultures@jpcert.or.jp",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131"
        },
        {
          "source": "vultures@jpcert.or.jp",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://www.justsystems.com/jp/info/js14003.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://jvn.jp/en/jp/JVN16318793/index.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://www.justsystems.com/jp/info/js14003.html"
        }
      ],
      "sourceIdentifier": "vultures@jpcert.or.jp",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-19"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro:6:*:government:*:*:*:*:*",
                    "matchCriteriaId": "200F0514-22F5-42A1-BBE6-9F8FE35D0C7B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro:7:*:government:*:*:*:*:*",
                    "matchCriteriaId": "7958FBA3-C4E5-464B-BE73-DDC26FA003CB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro:2008:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8B8FAFF2-94AD-4C8B-8B10-57651DEA6191",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro:2008:*:government:*:*:*:*:*",
                    "matchCriteriaId": "A358E678-D446-44D6-A14B-C53ABE9D4399",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro:2009:*:*:*:*:*:*:*",
                    "matchCriteriaId": "12205BDB-6DD6-46B8-891B-E4EAAB8F3588",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro:2009:*:government:*:*:*:*:*",
                    "matchCriteriaId": "DFE28E8A-8633-4C3B-A6D0-C7A46E39500F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro:2010:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C9C3EDDB-E30F-45BA-94C4-5C917283971E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro:2010:*:government:*:*:*:*:*",
                    "matchCriteriaId": "15F3A9BD-622B-41DC-BB6A-D33C349F01AE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro:2011:*:sou:*:*:*:*:*",
                    "matchCriteriaId": "F3158006-A67C-4F76-A235-A9EA142C31C1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro:2012:-:shou:*:*:*:*:*",
                    "matchCriteriaId": "6EE20B2C-6630-4362-9438-91571BD531B6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro:2013:-:gen:*:*:*:*:*",
                    "matchCriteriaId": "2DF9AE8E-A943-49AF-A507-4423ADC8796C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro:2014:-:*:*:tetsu:*:*:*",
                    "matchCriteriaId": "12FF0771-1475-4F22-9CFD-997EC6030087",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro:2014:-:*:*:tetsu_trial:*:*:*",
                    "matchCriteriaId": "396E4DE7-0F55-45E3-8269-DE0835C0F3BD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro_pro:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "242FF195-E6D8-4C22-B03E-00775A8ED5A7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro_pro:2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "115DF4BA-D8CE-4557-9C83-8B51999E9446",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:justsystems:ichitaro_pro:2:*:trial:*:*:*:*:*",
                    "matchCriteriaId": "BF10D9D2-9D3B-4D54-A8E4-DEABB2D8C159",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file."
          },
          {
            "lang": "es",
            "value": "Vulnerabilidad no especificada en JustSystems Ichitaro 2008 hasta 2011; Ichitaro Government 6, 7, 2008, 2009, y 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; y Ichitaro 2014 Tetsu permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de un fichero manipulado."
          }
        ],
        "id": "CVE-2014-7247",
        "lastModified": "2026-05-06T22:30:45.220",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 10.0,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 10.0,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2014-11-26T02:59:02.637",
        "references": [
          {
            "source": "vultures@jpcert.or.jp",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://jvn.jp/en/jp/JVN16318793/index.html"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.justsystems.com/jp/info/js14003.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://jvn.jp/en/jp/JVN16318793/index.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.justsystems.com/jp/info/js14003.html"
          }
        ],
        "sourceIdentifier": "vultures@jpcert.or.jp",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-19"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

FKIE_CVE-2014-7247

Vulnerability from fkie_nvd - Published: 2014-11-26 02:59 - Updated: 2026-06-17 00:14

Severity

Summary

References

URL	Tags
vultures@jpcert.or.jp	http://jvn.jp/en/jp/JVN16318793/index.html	Vendor Advisory
vultures@jpcert.or.jp	http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131	Vendor Advisory
vultures@jpcert.or.jp	http://www.justsystems.com/jp/info/js14003.html	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://jvn.jp/en/jp/JVN16318793/index.html	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.justsystems.com/jp/info/js14003.html	Patch, Vendor Advisory

Impacted products

Vendor	Product	Version
justsystems	ichitaro	6
justsystems	ichitaro	7
justsystems	ichitaro	2008
justsystems	ichitaro	2008
justsystems	ichitaro	2009
justsystems	ichitaro	2009
justsystems	ichitaro	2010
justsystems	ichitaro	2010
justsystems	ichitaro	2011
justsystems	ichitaro	2012
justsystems	ichitaro	2013
justsystems	ichitaro	2014
justsystems	ichitaro	2014
justsystems	ichitaro_pro	-
justsystems	ichitaro_pro	2
justsystems	ichitaro_pro	2

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "vultures@jpcert.or.jp"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro:6:*:government:*:*:*:*:*",
              "matchCriteriaId": "200F0514-22F5-42A1-BBE6-9F8FE35D0C7B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro:7:*:government:*:*:*:*:*",
              "matchCriteriaId": "7958FBA3-C4E5-464B-BE73-DDC26FA003CB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro:2008:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B8FAFF2-94AD-4C8B-8B10-57651DEA6191",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro:2008:*:government:*:*:*:*:*",
              "matchCriteriaId": "A358E678-D446-44D6-A14B-C53ABE9D4399",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro:2009:*:*:*:*:*:*:*",
              "matchCriteriaId": "12205BDB-6DD6-46B8-891B-E4EAAB8F3588",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro:2009:*:government:*:*:*:*:*",
              "matchCriteriaId": "DFE28E8A-8633-4C3B-A6D0-C7A46E39500F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro:2010:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9C3EDDB-E30F-45BA-94C4-5C917283971E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro:2010:*:government:*:*:*:*:*",
              "matchCriteriaId": "15F3A9BD-622B-41DC-BB6A-D33C349F01AE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro:2011:*:sou:*:*:*:*:*",
              "matchCriteriaId": "F3158006-A67C-4F76-A235-A9EA142C31C1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro:2012:-:shou:*:*:*:*:*",
              "matchCriteriaId": "6EE20B2C-6630-4362-9438-91571BD531B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro:2013:-:gen:*:*:*:*:*",
              "matchCriteriaId": "2DF9AE8E-A943-49AF-A507-4423ADC8796C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro:2014:-:*:*:tetsu:*:*:*",
              "matchCriteriaId": "12FF0771-1475-4F22-9CFD-997EC6030087",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro:2014:-:*:*:tetsu_trial:*:*:*",
              "matchCriteriaId": "396E4DE7-0F55-45E3-8269-DE0835C0F3BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro_pro:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "242FF195-E6D8-4C22-B03E-00775A8ED5A7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro_pro:2:*:*:*:*:*:*:*",
              "matchCriteriaId": "115DF4BA-D8CE-4557-9C83-8B51999E9446",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:justsystems:ichitaro_pro:2:*:trial:*:*:*:*:*",
              "matchCriteriaId": "BF10D9D2-9D3B-4D54-A8E4-DEABB2D8C159",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en JustSystems Ichitaro 2008 hasta 2011; Ichitaro Government 6, 7, 2008, 2009, y 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; y Ichitaro 2014 Tetsu permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de un fichero manipulado."
    }
  ],
  "id": "CVE-2014-7247",
  "lastModified": "2026-06-17T00:14:37.493",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2014-11-26T02:59:02.637",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://jvn.jp/en/jp/JVN16318793/index.html"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.justsystems.com/jp/info/js14003.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://jvn.jp/en/jp/JVN16318793/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.justsystems.com/jp/info/js14003.html"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-19"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-724P-PMJ5-XJVX

Vulnerability from github – Published: 2022-05-17 04:15 – Updated: 2022-05-17 04:15

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2014-7247"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2014-11-26T02:59:00Z",
    "severity": "HIGH"
  },
  "details": "Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file.",
  "id": "GHSA-724p-pmj5-xjvx",
  "modified": "2022-05-17T04:15:23Z",
  "published": "2022-05-17T04:15:23Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-7247"
    },
    {
      "type": "WEB",
      "url": "http://jvn.jp/en/jp/JVN16318793/index.html"
    },
    {
      "type": "WEB",
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131"
    },
    {
      "type": "WEB",
      "url": "http://www.justsystems.com/jp/info/js14003.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2014-7247

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2014-7247

Aliases

CVE-2014-7247

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2014-7247",
    "description": "Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file.",
    "id": "GSD-2014-7247"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2014-7247"
      ],
      "details": "Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file.",
      "id": "GSD-2014-7247",
      "modified": "2023-12-13T01:22:47.639057Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "vultures@jpcert.or.jp",
        "ID": "CVE-2014-7247",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "JVN#16318793",
            "refsource": "JVN",
            "url": "http://jvn.jp/en/jp/JVN16318793/index.html"
          },
          {
            "name": "JVNDB-2014-000131",
            "refsource": "JVNDB",
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131"
          },
          {
            "name": "http://www.justsystems.com/jp/info/js14003.html",
            "refsource": "CONFIRM",
            "url": "http://www.justsystems.com/jp/info/js14003.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro:2014:-:*:*:tetsu:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro:2014:-:*:*:tetsu_trial:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro_pro:2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro_pro:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro:7:*:government:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro:6:*:government:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro:2008:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro:2009:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro:2010:*:government:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro:2008:*:government:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro:2010:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro:2012:-:shou:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro:2009:*:government:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro:2011:*:sou:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro:2013:-:gen:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:justsystems:ichitaro_pro:2:*:trial:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2014-7247"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Unspecified vulnerability in JustSystems Ichitaro 2008 through 2011; Ichitaro Government 6, 7, 2008, 2009, and 2010; Ichitaro Pro; Ichitaro Pro 2; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen; and Ichitaro 2014 Tetsu allows remote attackers to execute arbitrary code via a crafted file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-19"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.justsystems.com/jp/info/js14003.html",
              "refsource": "CONFIRM",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.justsystems.com/jp/info/js14003.html"
            },
            {
              "name": "JVNDB-2014-000131",
              "refsource": "JVNDB",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2014-000131"
            },
            {
              "name": "JVN#16318793",
              "refsource": "JVN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://jvn.jp/en/jp/JVN16318793/index.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2015-02-24T16:18Z",
      "publishedDate": "2014-11-26T02:59Z"
    }
  }
}

JVNDB-2014-000131

Vulnerability from jvndb - Published: 2014-11-13 07:52 - Updated:2014-11-27 08:58

Severity

N/A (UNKNOWN) - -

Summary

Ichitaro series vulnerable to arbitrary code execution

Details

The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution. This vulnerability differs from other issues that were previously published on JVN. For more information, please refer to the developer's website.

References

Type

URL

	JVN	http://jvn.jp/jp/JVN16318793/index.html
	CVE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7247
	NVD	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7247
	IPA SECURITY ALERTS	http://www.ipa.go.jp/security/ciadr/vul/20141113-jvn.html
	No Mapping(CWE-noinfo)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

	JustSystems Corporation	Ichitaro
	JustSystems Corporation	Ichitaro Pro

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000131.html",
  "dc:date": "2014-11-27T17:58+09:00",
  "dcterms:issued": "2014-11-13T16:52+09:00",
  "dcterms:modified": "2014-11-27T17:58+09:00",
  "description": "The \"Ichitaro\" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution.\r\nThis vulnerability differs from other issues that were previously published on JVN.\r\n\r\nFor more information, please refer to the developer\u0027s website.",
  "link": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000131.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:justsystems:ichitaro",
      "@product": "Ichitaro",
      "@vendor": "JustSystems Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:justsystems:ichitaro_pro",
      "@product": "Ichitaro Pro",
      "@vendor": "JustSystems Corporation",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "9.3",
    "@severity": "High",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2014-000131",
  "sec:references": [
    {
      "#text": "http://jvn.jp/jp/JVN16318793/index.html",
      "@id": "JVN#16318793",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7247",
      "@id": "CVE-2014-7247",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7247",
      "@id": "CVE-2014-7247",
      "@source": "NVD"
    },
    {
      "#text": "http://www.ipa.go.jp/security/ciadr/vul/20141113-jvn.html",
      "@id": "Security Alert for Ichitaro series vulnerable to arbitrary code execution (JVN#16318793)",
      "@source": "IPA SECURITY ALERTS"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-noinfo",
      "@title": "No Mapping(CWE-noinfo)"
    }
  ],
  "title": "Ichitaro series vulnerable to arbitrary code execution"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2014-7247 (GCVE-0-2014-7247)

FKIE_CVE-2014-7247

GHSA-724P-PMJ5-XJVX

GSD-2014-7247

JVNDB-2014-000131

Tags

Sightings

Nomenclature

Related by attack behaviour