NJStar Security Information

2006-03-18: Uninstallation bug in NJStar Communicator 2.6,

A setup bug has been reported in the recent uninstall program of Njstar Communicator Version older than 2.60.60318. The uninstall removes the installation folder by default. This normally is not a problem, as NJStar Communicator is installed in a specific folder c:\Program Files\Njstar Communicator\ by default.

But this can be a serious problem if you have installed NJStar Communicator in My Desktop or My Document Files folder. It will delete all your Desktop or Document files if you try to uninstall.

Recommendations:

1. DO NOT install into My Desktop or My Document Files folder.

2. If you have installed into My Desktop or My Document Files folder,
Please DO NOT UNINSTALL it before upgrading to v2.60.60318.

3. Upgrade to v2.60.60318 Now: [ Registered Version Upgrade ]   [ Shareware Version Download ]

2006-02-18: Security Vulnerability Found in NJStar Word Processor
A security firm has identified a security vulnerability in NJStar Chinese WP and Japanese WP version 4.x and 5.0x. This security vulnerability can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the handling of font names read from a NJSTAR document ".njx" file. This can be exploited to cause a stack-based buffer overflow and can be exploited to execute arbitrary code when a malicious ".njx" file is opened.

This vulnerability has been fixed by NJStar before the discovery is released to the public by the security firm. All users of NJStar WP version 4.x and 5.0x are recommended to update to the latest version 5.10 or above.


If your are registered user of NJStar WP v5.0x
You can get free upgrade to the latest version:
NJStar Chinese WP 5.10 Upgrade   NJStar Japanese WP 5.10 Upgrade

If your are registered user of NJStar WP v4.x
You can get free upgrade to version 4.35.60208:
NJStar Chinese WP 4.35.60208 Upgrade   NJStar Japanese WP 4.35.60208 Upgrade

OR, You can get discounted upgrade to latest version 5.10:
NJStar Chinese WP 5.10 (not free)   NJStar Japanese WP 5.10 (not free)


If your are user of shareware version of NJStar WP 4.x or 5.0x
Please download latest shareware version:
NJStar Chinese WP 5.10 Shareware   NJStar Japanese WP 5.10 Shareware



Chinese WP | Japanese WP | NJStar Communicator | NJWIN CJK Viewer | NJStar Chinese Pen | NJStar Chinese Calendar
Order | Support | Download | Join NJStar Friends | Contact NJStar


© Copyright: NJStar Software Corp., 1996 - 2006
email: support @njstar.com