Hiroshi Ukai has reported a vulnerability in various JustSystem products, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in JSFC.DLL and can be exploited to cause a buffer overflow e.g. when opening a specially crafted .JTD file.

Successful exploitation may allow execution of arbitrary code.

Please see the vendor's advisory for a list of affected products and versions.

Solution
Apply updates (see vendor's advisory for details).
Further details available to Secunia VIM customers

Provided and/or discovered by
Hiroshi Ukai, Fourteenfourty Research Institute

Changelog
Further details available to Secunia VIM customers

Original Advisory
JustSystems:
http://www.justsystems.com/jp/info/pd8001.html

Fourteenfourty Research Institute:
http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20080107

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers