An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed with the privilege of the Windows service if it is placed in a certain path. Affected products are bundled with the following product series: Office and Office Integrated Software, ATOK, Hanako, JUST PDF, Shuriken, Homepage Builder, JUST School, JUST Smile Class, JUST Smile, JUST Frontier, JUST Jump, and Tri-De DetaProtect.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/jp/JVN57073973/index.html | Third Party Advisory |
| https://www.justsystems.com/jp/corporate/info/js22001.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2022-08-16 08:15
Updated : 2024-02-28 19:29
NVD link : CVE-2022-36344
Mitre link : CVE-2022-36344
CVE.ORG link : CVE-2022-36344
JSON object : View
Products Affected
justsystems
- just_medical_3
- just_smile_7
- hanako_police_6
- just_government_4
- hanako_police_5
- hanako_pro_3
- just_school_6
- just_calc_3
- homepage_builder_22
- just_pdf_3
- just_school_7
- just_government_2
- just_police_3
- just_police_4
- ichitaro_pro_5
- just_jump_8
- ichitaro_government_9
- just_jump_class_2
- just_note_3
- hanako_pro_5
- just_calc_4
- just_focus_3
- hanako_police_7
- just_government_5
- ichitaro_pro_3
- just_note_5
- just_medical_4
- homepage_builder_21
- just_medical_5
- just_police_5
- atok_medical_3
- ichitaro_pro_4
- just_office_3
- just_smile_class_2
- just_office_4
- tri-de_dataprotect
- shuriken_pro_7
- homepage_builder_20
- ichitaro_government_8
- just_jump_class
- just_pdf_4
- just_police_2
- just_pdf_5
- just_office_5
- just_medical_2
- ichitaro_government_10
- atok_medical_2
- just_smile_6
- shuriken_pro_6
- atok_pro_5
- atok_pro_4
- just_calc_5
- atok_pro_3
- just_note_4
- hanako_pro_4
- just_frontier_3
- just_office_2
- just_focus_4
- just_government_3
- just_smile_8
CWE
CWE-428
Unquoted Search Path or Element