Refine your search
2 vulnerabilities found for ATOK by JustSystems Corporation
jvndb-2012-000089
Vulnerability from jvndb
Published
2012-09-25 13:40
Modified
2012-09-25 13:40
Summary
ATOK for Android issue in the access permissions for the learning information file
Details
ATOK for Android provided by JUST Systems, contains an issue in the access permissions for the learning information file.
ATOK for Android provided by JUST Systems contains an issue where another application may access the learning information file which stores user input strings.
Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported this information to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000089.html",
"dc:date": "2012-09-25T13:40+09:00",
"dcterms:issued": "2012-09-25T13:40+09:00",
"dcterms:modified": "2012-09-25T13:40+09:00",
"description": "ATOK for Android provided by JUST Systems, contains an issue in the access permissions for the learning information file.\r\n\r\nATOK for Android provided by JUST Systems contains an issue where another application may access the learning information file which stores user input strings.\r\n\r\nGaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported this information to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000089.html",
"sec:cpe": {
"#text": "cpe:/a:justsystems:atok",
"@product": "ATOK",
"@vendor": "JustSystems Corporation",
"@version": "2.2"
},
"sec:cvss": {
"@score": "2.6",
"@severity": "Low",
"@type": "Base",
"@vector": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"@version": "2.0"
},
"sec:identifier": "JVNDB-2012-000089",
"sec:references": [
{
"#text": "http://jvn.jp/en/jp/JVN93344001/index.html",
"@id": "JVN#93344001",
"@source": "JVN"
},
{
"#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4016",
"@id": "CVE-2012-4016",
"@source": "CVE"
},
{
"#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-4016",
"@id": "CVE-2012-4016",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-264",
"@title": "Permissions(CWE-264)"
}
],
"title": "ATOK for Android issue in the access permissions for the learning information file"
}
jvndb-2009-000057
Vulnerability from jvndb
Published
2010-03-23 17:42
Modified
2010-03-23 17:42
Summary
ATOK screen lock bypass vulnerability
Details
ATOK from JustSystems Corporation contains a screen lock bypass vulnerability.
ATOK from JustSystems Corporation is a software for Japanese Kana-Kanji conversion. ATOK contains an issue with the restriction of launching external applications, which may lead to a screen lock bypass vulnerability.
Taku Kudo of Google Inc. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000057.html",
"dc:date": "2010-03-23T17:42+09:00",
"dcterms:issued": "2010-03-23T17:42+09:00",
"dcterms:modified": "2010-03-23T17:42+09:00",
"description": "ATOK from JustSystems Corporation contains a screen lock bypass vulnerability.\r\n\r\nATOK from JustSystems Corporation is a software for Japanese Kana-Kanji conversion. ATOK contains an issue with the restriction of launching external applications, which may lead to a screen lock bypass vulnerability.\r\n\r\nTaku Kudo of Google Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000057.html",
"sec:cpe": [
{
"#text": "cpe:/a:justsystems:atok",
"@product": "ATOK",
"@vendor": "JustSystems Corporation",
"@version": "2.2"
},
{
"#text": "cpe:/a:justsystems:atok_smile",
"@product": "ATOK smile",
"@vendor": "JustSystems Corporation",
"@version": "2.2"
}
],
"sec:cvss": {
"@score": "7.2",
"@severity": "High",
"@type": "Base",
"@vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"@version": "2.0"
},
"sec:identifier": "JVNDB-2009-000057",
"sec:references": [
{
"#text": "http://jvn.jp/en/jp/JVN57040664/index.html",
"@id": "JVN#57040664",
"@source": "JVN"
},
{
"#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4738",
"@id": "CVE-2009-4738",
"@source": "CVE"
},
{
"#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4738",
"@id": "CVE-2009-4738",
"@source": "NVD"
},
{
"#text": "http://www.ipa.go.jp/security/english/vuln/200909_atok_en.html",
"@id": "Security Alert for Vulnerability in ATOK",
"@source": "IPA SECURITY ALERTS"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-264",
"@title": "Permissions(CWE-264)"
}
],
"title": "ATOK screen lock bypass vulnerability"
}