Justsystems Atok vulnerabilities

2 CVEs affecting Justsystems Atok, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-4738, published 2013-01-18.

More from Justsystems.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-4016, published 2012-09-28. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. The ATOK application before 1.0.4 for Android allows remote attackers to read the learning information file, and obtain sensitive input-string information, via a crafted application.
• CVE-2009-4738, published 2013-01-18. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows physically proximate users to bypass the…