----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
JustSystem Products JSFC.DLL Buffer Overflow Vulnerability

SECUNIA ADVISORY ID:
SA28275

VERIFY ADVISORY:
http://secunia.com/advisories/28275/

CRITICAL:
Highly critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:
Ichitaro 10.x
http://secunia.com/product/11598/
Ichitaro 11.x
http://secunia.com/product/11599/
Ichitaro 12.x
http://secunia.com/product/11600/
Ichitaro 13.x
http://secunia.com/product/11601/
Ichitaro 2004
http://secunia.com/product/11602/
Ichitaro 2005
http://secunia.com/product/11603/
Ichitaro 2006
http://secunia.com/product/11604/
Ichitaro 2007
http://secunia.com/product/13868/
Ichitaro 9.x
http://secunia.com/product/11597/
Ichitaro Lite2
http://secunia.com/product/12807/
Ichitaro viewer 4.x
http://secunia.com/product/12808/
Ichitaro for Linux
http://secunia.com/product/11596/

DESCRIPTION:
Hiroshi Ukai has reported a vulnerability in various JustSystem
products, which can be exploited by malicious people to compromise a
user's system.

The vulnerability is caused due to a boundary error in JSFC.DLL and
can be exploited to cause a buffer overflow e.g. when opening a
specially crafted .JTD file.

Successful exploitation may allow execution of arbitrary code.

Please see the vendor's advisory for a list of affected products and
versions.

SOLUTION:
Apply updates (see vendor's advisory for details).
http://www.justsystems.com/jp/info/pd8001.html

PROVIDED AND/OR DISCOVERED BY:
Hiroshi Ukai, Fourteenfourty Research Institute

ORIGINAL ADVISORY:
JustSystems:
http://www.justsystems.com/jp/info/pd8001.html

Fourteenfourty Research Institute:
http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20080107

OTHER REFERENCES:
JVN#08237857:
http://jvn.jp/jp/JVN%2308237857/index.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------