CVE-2023-39341
"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to…
- Published
- Updated
- Reserved
- Assigned by
- jpcert
Description
"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Edition version 1.4.0, InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 to 3.2.2, Zerona / Zerona PLUS versions 3.2.32 to 3.2.36, ActSecure χ versions 3.4.0 to 3.4.6 and 3.5.0, Dual Safe Powered by FFRI yarai version 1.4.1, EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0), and EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0).
Timeline
ID reserved
By jpcert
- 12 days later
· 12 days later
Published
- 15 months later
· 15 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Low3.3 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
- EPSS (exploitation in 30 days)
- 0.29% · top 78% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 3.3.
Weakness
- Improper check or handling of exceptional conditions
- CWE-755 (opens in a new tab)All about CWE-755 and its CVEs
Affected products
FFRI Security, Inc. · FFRI yarai
- affected versions 3.4.0 to 3.4.6 and 3.5.0
FFRI Security, Inc. · FFRI yarai Home and Business Edition
- affected version 1.4.0
Soliton Systems K.K. · InfoTrace Mark II Malware Protection (Mark II Zerona)
- affected versions 3.0.1 to 3.2.2
Soliton Systems K.K. · Zerona / Zerona PLUS
- affected versions 3.2.32 to 3.2.36
- affected versions 3.4.0 to 3.4.6 and 3.5.0
SOURCENEXT CORPORATION · Dual Safe Powered by FFRI yarai
- affected version 1.4.1
- affected Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0
Sky Co., Ltd. · EDR Plus Pack Cloud
- affected Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0
References (6)
- https://www.ffri.jp/security-info/index.htm (opens in a new tab)x_transferred
- https://www.soliton.co.jp/support/zerona_notice_2023.html (opens in a new tab)x_transferred
- https://www.support.nec.co.jp/View.aspx?id=3140109240 (opens in a new tab)x_transferred
- https://www.sourcenext.com/support/i/2023/230718_01 (opens in a new tab)x_transferred
- https://www.skyseaclientview.net/news/230807_01/ (opens in a new tab)x_transferred
- https://jvn.jp/en/jp/JVN42527152/ (opens in a new tab)x_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-39341)Record last updated .