CVE:CVE-2009-4738
CNNVD:CNNVD-201301-388
JustSystems Corporation是一个日语输入系统。
JustSystems Corporation ATOK 2006至2009，ATOK flat-rate服务以及带有ATOK Smile模块的Just Smile 4版本中存在未明漏洞。通过与‘启动外部的应用程序’相关的向量，物理邻近的攻击者利用该漏洞绕过频幕锁定并以系统特权执行任意命令。
solution:Upgrade justsystems atok to a higher version than 2006,2007,2008,2009,and avoid the version 2006,2007,2008,2009; Upgrade justsystems atok_flat-rate_service to a higher version than -; Upgrade justsystems just_smile to a higher version than 4,and avoid the version 4