CVE-2007-1938

EXPLOITED

Ichitaro 2005-2007 - Buffer Overflow via Crafted Document

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2007-1938 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

Ichitaro 2005 through 2007, and possibly related products, allows remote attackers to have an unknown impact via unspecified vectors in a document distributed through e-mail or a web site, possibly due to a buffer overflow or cross-site scripting (XSS).

References (8)

Core 8
Core References
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1287
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/33507
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/34759
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24780
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1017887
Various Sources x_refsource_confirm
http://www.justsystem.co.jp/info/pd7002.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/23386

Scores

EPSS 0.0145
EPSS Percentile 70.4%

Details

VulnCheck KEV 2007-04-10
CWE
CWE-119 CWE-79
Status published
Products (3)
ichitaro/ichitaro 2005
ichitaro/ichitaro 2006
ichitaro/ichitaro 2007
Published Apr 10, 2007
Tracked Since Feb 18, 2026