CVE-2009-1054

Unspecified vulnerability in JustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier allows remote attackers to execute arbitrary code via a crafted file, as exploited in the wild by Trojan.Tarodrop.H in March 2009.

• http://secunia.com/advisories/34405Vendor Advisory
• http://www.justsystems.com/jp/info/js09001.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/34138
• http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99
• http://www.vupen.com/english/advisories/2009/0769Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49280
• http://secunia.com/advisories/34405Vendor Advisory
• http://www.justsystems.com/jp/info/js09001.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/34138
• http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-031608-2424-99
• http://www.vupen.com/english/advisories/2009/0769Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49280

Published

Mar 24, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1048The web interface on the snom VoIP phones snom 300, snom 320…9.8
• CVE-2009-1049SQL injection vulnerability in articleCall.php in Bloginator…
• CVE-2009-1050Bloginator 1A allows remote attackers to bypass authenticati…
• CVE-2009-1051FubarForum 1.6 and earlier stores sensitive information unde…
• CVE-2009-1052FireAnt 1.3 and earlier stores sensitive information under t…
• CVE-2009-1053chaozzDB 1.2 and earlier stores sensitive information under …
• CVE-2009-1055Unspecified vulnerability in the web service in Sitecore CMS…
• CVE-2009-1056IBM Rational AppScan Enterprise before 5.5 FP1 allows remote…
• CVE-2009-1057MicroSmarts Enterprise ZipItFast! 3.0 allows remote attacker…
• CVE-2009-1058Stack-based buffer overflow in ZipGenius might allow remote …
• CVE-2009-1059Stack-based buffer overflow in Trident PowerZip 7.2 might al…
• CVE-2009-1060Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6…