Lucene search
+L

6 matches found

CNVD
CNVD
•added 2017/02/27 12:00 a.m.•21 views

JustSystems Ichitaro Memory Corruption Vulnerability

JustSystems Ichitaro is a suite of word processing software from the Japanese company JustSystems. JustSystems Ichitaro 2016 Trial fails to properly handle incorrect function results, allowing remote attackers to exploit the vulnerability to build malicious files that can be parsed by the user,...

7.8CVSS7.5AI score0.01153EPSS
SaveExploits1References1
OSV
OSV
•added 2017/02/24 10:59 p.m.•21 views

CVE-2017-2791

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...

7.8CVSS6.2AI score0.01153EPSS
SaveExploits1References2
Prion
Prion
•added 2017/02/24 10:59 p.m.•26 views

Design/Logic Flaw

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...

6.8CVSS7.7AI score0.01153EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2017/02/24 10:00 p.m.•65 views

CVE-2017-2791

Summary of findings (CVE-2017-2791) : JustSystems Ichitaro 2016 Trial is vulnerable during handling of PowerPoint content. The attacker can craft a chain of records via the Current User and UserEditAtom paths (PowerPoint Document stream) to induce memory corruption. The root cause is lack of vali...

7.8CVSS7.6AI score0.01153EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/24 12:00 a.m.•4 views

CVE-2017-2789: Improper Restriction of Operations within the Bounds of a Memory Buffer

When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy from the document. If both of these values are larger than the size of the buffer, the application will choose the smaller of the two and trust it to copy data...

9.8CVSS6.5AI score0.0234EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/24 12:00 a.m.•8 views

CVE-2017-2791: Improper Restriction of Operations within the Bounds of a Memory Buffer

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...

7.8CVSS6.1AI score0.01153EPSS
SaveExploits1References2
Rows per page
Query Builder