estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters.
http://www.securityfocus.com/bid/15236
http://sourceforge.net/project/shownotes.php?release_id=366565
http://securitytracker.com/id?1015119