CVE-2011-1331

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-07-18 · updated 2026-06-16
Weakness: CWE-119

Description

JustSystems Ichitaro 2005 through 2011, Ichitaro Government 6, Ichitaro Government 2006 through 2010, Ichitaro Portable, Ichitaro Pro, and Ichitaro Viewer allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted document, as exploited in the wild in early 2011.

Affected products

JustSystems Ichitaro: 6, 2005, 2006, 2007, 2008, 2009 (+2)
JustSystems Ichitaro Portable: all versions
JustSystems Ichitaro Pro: all versions
JustSystems Ichitaro Viewer: 5.1.3.0, 19.0.1.0, 19.0.2.0, 19.0.3.0, 20.0.2.0

References

http://jvn.jp/en/jp/JVN87239473/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000043
http://secunia.com/advisories/44956
http://www.justsystems.com/jp/info/js11001.html
http://www.securityfocus.com/bid/48283
http://www.symantec.com/connect/blogs/targeted-attacks-2011-using-ichitaro-zero-day-vulnerability
https://exchange.xforce.ibmcloud.com/vulnerabilities/68072
http://jvn.jp/en/jp/JVN87239473/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000043
http://secunia.com/advisories/44956
http://www.justsystems.com/jp/info/js11001.html
http://www.securityfocus.com/bid/48283

Get alerted when CVE-2011-1331 or the next vulnerability affects your stack