VYPR
Unrated severityNVD Advisory· Published Oct 28, 2007· Updated Apr 23, 2026

CVE-2007-5687

CVE-2007-5687

Description

Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long (1) pard field or (2) font name in the fcharset0 field, which is not properly handled in (a) JSTARO4.OCX; or (3) a long title, which is not properly handled by (b) TJSVDA.DLL.

Affected products

8
  • cpe:2.3:a:justsystem:ichitaro:11.0:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:justsystem:ichitaro:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:justsystem:ichitaro:12.0:*:*:*:*:*:*:*
    • cpe:2.3:a:justsystem:ichitaro:13.0:*:*:*:*:*:*:*
    • cpe:2.3:a:justsystem:ichitaro:2004:*:*:*:*:*:*:*
    • cpe:2.3:a:justsystem:ichitaro:2005:*:*:*:*:*:*:*
    • cpe:2.3:a:justsystem:ichitaro:2006:*:*:*:*:*:*:*
    • cpe:2.3:a:justsystem:ichitaro:linux:*:*:*:*:*:*:*
    • cpe:2.3:a:justsystem:ichitaro:lite2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

14

News mentions

0

No linked articles in our index yet.