Ichitaro Office Excel File Code Execution Vulnerability

Summary A vulnerability was discovered within the Ichitaro word processor. Ichitaro is published by JustSystems and is considered one of the more popular word processors used within Japan. Ichitaro handles Microsoft Excel’s .xls file format. When processing a record type of 0x3c from a Workbook...

JustSystems Ichitaro Heap Buffer Overflow Vulnerability

JustSystems Ichitaro is a suite of word processing software from the Japanese company JustSystems. A heap buffer overflow vulnerability in the Ichitaro word processor in JustSystems Ichitaro allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by th...

JustSystems Ichitaro Memory Corruption Vulnerability

JustSystems Ichitaro is a suite of word processing software from the Japanese company JustSystems. JustSystems Ichitaro 2016 Trial fails to properly handle incorrect function results, allowing remote attackers to exploit the vulnerability to build malicious files that can be parsed by the user,...

JustSystems Ichitaro Buffer Overflow Vulnerability

JustSystems Ichitaro is a suite of word processing software from the Japanese company JustSystems. A heap-based buffer overflow vulnerability exists in the Ichitaro word processor in JustSystems Ichitaro, which allows remote attackers to build malicious files that can be parsed by the user, causi...

Heap overflow

When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy from the document. If both of these values are larger than the size of the buffer, the application will choose the smaller of the two and trust it to copy data...

Heap overflow

When processing a record type of 0x3c from a Workbook stream from an Excel file .xls, JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses this result as the size for a memcpy. This results in a heap-based buffer overflow and can lead to...

CVE-2017-2791

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...

CVE-2017-2789

When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy from the document. If both of these values are larger than the size of the buffer, the application will choose the smaller of the two and trust it to copy data...

Design/Logic Flaw

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...

CVE-2017-2791

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...

CVE-2017-2789

When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy from the document. If both of these values are larger than the size of the buffer, the application will choose the smaller of the two and trust it to copy data...

CVE-2017-2790

CVE-2017-2790 affects JustSystems Ichitaro Office (Excel .xls handling). A heap-based buffer overflow arises when processing a Workbook record type 0x3c: the code reads a size, subtracts one, and uses the result as the memcpy length. An unchecked integer underflow (size becomes 0xffff) can be tri...

CVE-2017-2791

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...

CVE-2017-2789

CVE-2017-2789 affects JustSystems Ichitaro (Ichitaro Office) and its JTD processing of Figures/FigureData. The vulnerability is a heap-based buffer overflow caused when copying FigureData: the code computes two lengths to decide how much to copy, and if both exceed the allocated buffer, it trusts...

CVE-2017-2790

When processing a record type of 0x3c from a Workbook stream from an Excel file .xls, JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses this result as the size for a memcpy. This results in a heap-based buffer overflow and can lead to...

CVE-2017-2791

Summary of findings (CVE-2017-2791) : JustSystems Ichitaro 2016 Trial is vulnerable during handling of PowerPoint content. The attacker can craft a chain of records via the Current User and UserEditAtom paths (PowerPoint Document stream) to induce memory corruption. The root cause is lack of vali...

PT-2017-15538

Name of the Vulnerable Software and Affected Versions JustSystems Ichitaro Office affected versions not specified Description The issue occurs when processing a specific record type from an Excel file, leading to a heap-based buffer overflow. This can result in code execution under the context of...

PT-2017-15539

Name of the Vulnerable Software and Affected Versions JustSystems Ichitaro version 2016 Trial Description The issue arises when the application attempts to open a specially crafted PowerPoint file, leading to incorrect error handling for a function's result. This result is then used in a pointer...

PT-2017-15537

Name of the Vulnerable Software and Affected Versions JustSystems Ichitaro Office version 2016 Trial Description The issue arises when copying file data into a buffer. The application calculates two values to determine the amount of data to copy from the document. If both values exceed the buffer...

Ichitaro Office JTD Figure handling Code Execution Vulnerability

Summary A vulnerability was discovered within the Ichitaro word processor. Ichitaro is published by JustSystems and is considered one of the more popular word processors used within Japan. Ichitaro’s proprietary file format is a Compound Document similar to .doc for Microsoft Word called .jtd. Wh...