CVE-2007-6436 Information

Description

Stack-based buffer overflow in JSGCI.DLL in JustSystems Ichitaro 2005 2006 and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted document as actively exploited in December 2007 by the Tarodrop.F trojan. NOTE: some of these details are obtained from third party information.

Reference

http://secunia.com/advisories/27992 http://www.osvdb.org/39395 http://www.symantec.com/security_response/writeup.jsp?docid=2007-121308-3953-99 http://www.vupen.com/english/advisories/2007/4213 https://exchange.xforce.ibmcloud.com/vulnerabilities/39025