Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string.

A potential buffer overflow in ChaSen that could possibly allow remote attackers to execute arbitrary code via a specially crafted string was fixed (CVE-2011-4000).

Vulnerabilities were discovered for the chasen packages in openSUSE version 12.1.

JVN iPedia reports :

ChaSen provided by Nara Institute of Science and Technology is a software for morphologically analyzing Japanese. ChaSen contains an issue when reading in strings, which may lead to a buffer overflow.

An arbitrary script may be executed by an attacker with access to a system that is running a product listed in 'Products Affected.'

The remote host is affected by the vulnerability described in GLSA-201207-03 (ChaSen: User-assisted execution of arbitrary code)

    An error in chalib.c of ChaSen could cause a buffer overflow.
  Impact :

    A remote attacker could entice a user to open a specially crafted text       file using ChaSen or an application using the ChaSen libraries, possibly       resulting in execution of arbitrary code with the privileges of the       process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

It was discovered that ChaSen, a Japanese morphological analysis system, contains a buffer overflow, potentially leading to arbitrary code execution in programs using the library.

ID	Name	Product	Family	Severity
75798	openSUSE Security Update : chasen (openSUSE-SU-2012:0026-1)	Nessus	SuSE Local Security Checks	high
75446	openSUSE Security Update : chasen (openSUSE-SU-2012:0026-1)	Nessus	SuSE Local Security Checks	high
74589	openSUSE Security Update : chasen (openSUSE-2012-20)	Nessus	SuSE Local Security Checks	high
73488	FreeBSD : ChaSen -- buffer overflow (972837fc-c304-11e3-8758-00262d5ed8ee)	Nessus	FreeBSD Local Security Checks	high
59895	GLSA-201207-03 : ChaSen: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	high
57501	Debian DSA-2361-1 : chasen - buffer overflow	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2011-4000

critical

Tenable Plugins

high

high

high

high

high

high