CVE-2007-5687
Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004...
Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long (1) pard field or (2) font name in the fcharset0 field, which is not properly handled in (a) JSTARO4.OCX; or (3) a long title, which is not properly handled by (b) TJSVDA.DLL.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long (1) pard field or (2) font name in the fcharset0 field, which is not properly handled in (a) JSTARO4.OCX; or (3) a long title, which is not properly handled by (b) TJSVDA.DLL.
- Record
CVE-2007-5687- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long (1) pard field or (2) font name in the fcharset0 field, which is not properly handled in (a) JSTARO4.OCX; or (3) a long title, which is not properly handled by (b) TJSVDA.DLL.
- Record
CVE-2007-5687- Updated
- 2026-11-02
EUVDEUVD-2007-5659 No score
Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long (1) pard field or (2) font name in the fcharset0 field, which is not properly handled in (a) JSTARO4.OCX; or (3) a long title, which is not properly handled by (b) TJSVDA.DLL.
- Record
EUVD-2007-5659- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5pm4-7676-v58f No score
Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004...
Multiple buffer overflows in the rich text processing functionality in JustSystems Ichitaro 2004 through 2007, 11 through 13, and other versions allow remote attackers to execute arbitrary code via a long (1) pard field or (2) font name in the fcharset0 field, which is not properly handled in (a) JSTARO4.OCX; or (3) a long title, which is not properly handled by (b) TJSVDA.DLL.
- Record
GHSA-5pm4-7676-v58f- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5687 is a high vulnerability (CVSS 9.3) in Justsystem Ichitaro, published October 28, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.74%, the 93rd percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/38130
securityfocus.com/bid/26206
secunia.com/advisories/27393
fourteenforty.jp/research/advisory.cgi?FFRRA-20071025-2
jvn.jp/jp/JVN%2350495547/index.html
Show 10 moreShow less
osvdb.org/39394
justsystems.com/jp/info/pd7004.html
vupen.com/english/advisories/2007/3623
ipa.go.jp/security/vuln/200710_Ichitaro.html
nvd.nist.gov/vuln/detail/CVE-2007-5687
github.com/advisories/GHSA-5pm4-7676-v58f