CVE-2009-4738 - Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate servi

CVE-2009-4738

Summary

Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows physically proximate users to bypass the screen lock and execute commands with system privileges via unknown vectors related to "launching external applications."

References

Vulnerable Configurations

cpe:2.3:a:justsystems:atok:2006:-:windows:*:*:*:*:*
cpe:2.3:a:justsystems:atok:2006:-:windows:*:*:*:*:*
cpe:2.3:a:justsystems:atok:2007:-:windows:*:*:*:*:*
cpe:2.3:a:justsystems:atok:2007:-:windows:*:*:*:*:*
cpe:2.3:a:justsystems:atok:2008:-:windows:*:*:*:*:*
cpe:2.3:a:justsystems:atok:2008:-:windows:*:*:*:*:*
cpe:2.3:a:justsystems:atok:2009:-:windows:*:*:*:*:*
cpe:2.3:a:justsystems:atok:2009:-:windows:*:*:*:*:*
cpe:2.3:a:justsystems:atok_flat-rate_service:-:*:*:*:*:*:*:*
cpe:2.3:a:justsystems:atok_flat-rate_service:-:*:*:*:*:*:*:*
cpe:2.3:a:justsystems:just_smile:4:*:*:*:*:*:*:*
cpe:2.3:a:justsystems:just_smile:4:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 29-01-2013 - 05:00)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	36220
confirm	http://www.justsystems.com/jp/info/js09003.html
jvn	JVN#57040664
jvndb	JVNDB-2009-000057
secunia	36560

Last major update

29-01-2013 - 05:00

Published

18-01-2013 - 23:55

Last modified

29-01-2013 - 05:00