CVE-2014-2003: Justsystems Ichitaro

High severity, CVSS 7.6. EPSS: 3.6% chance of exploitation in the next 30 days.

JustSystems JUST Online Update, as used in Ichitaro through 2014 and other products, does not properly validate signatures of update modules, which allows remote attackers to spoof modules and execute arbitrary code via a crafted signature.

Affected products

• Justsystems Ichitaro: up to and including 2014; version 10 only; version 11 only; version 12 only; version 13 only; version 2004 only; …
• Justsystems Just Online Update: affected versions not specified

Published 2014-06-16. Last modified 2026-06-17.