Description
Stack-based buffer overflow in NJStar Chinese and Japanese Word Processor 4.x and 5.x before 5.10 allows user-assisted attackers to execute arbitrary code via font names in NJStar (.njx) documents.
References
- ADV-2006-0670 vdb-entry
- njstar-font-name-bo(24773) vdb-entry
- http://www.njstar.com/njstar/chinese/
- 18702 third-party-advisory
- 461 third-party-advisory
- http://www.njstar.com/njstar/japanese/
- 16737 vdb-entry
- 23354 vdb-entry
- http://secunia.com/secunia_research/2006-5/advisory/
- 20060220 Secunia Research: NJStar Word Processor Font Name Buffer Overflow mailing-list
- 1015649 vdb-entry