CVE-2009-1054

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-03-24 · updated 2026-06-16

Description

Unspecified vulnerability in JustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier allows remote attackers to execute arbitrary code via a crafted file, as exploited in the wild by Trojan.Tarodrop.H in March 2009.

Affected products

Ichitaro: 13, 2004, 2005, 2006, 2007, 2008 (+1)
Ichitaro Viewer: through 5.1.5.0

References

http://secunia.com/advisories/34405
http://www.justsystems.com/jp/info/js09001.html
http://www.securityfocus.com/bid/34138
http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99
http://www.vupen.com/english/advisories/2009/0769
https://exchange.xforce.ibmcloud.com/vulnerabilities/49280
http://secunia.com/advisories/34405
http://www.justsystems.com/jp/info/js09001.html
http://www.securityfocus.com/bid/34138
http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99
http://www.vupen.com/english/advisories/2009/0769
https://exchange.xforce.ibmcloud.com/vulnerabilities/49280

Get alerted when CVE-2009-1054 or the next vulnerability affects your stack