JustSystems Ichitaro Buffer Overflow (CVE-2017-2789)

A buffer overflow vulnerability exists in JustSystems Ichitaro. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Ichitaro Office JTD Figure handling Code Execution Vulnerability(CVE-2017-2789)

Summary A vulnerability was discovered within the Ichitaro word processor. Ichitaro is published by JustSystems and is considered one of the more popular word processors used within Japan. Ichitaro's proprietary file format is a Compound Document similar to .doc for Microsoft Word called .jtd. Wh...

CVE-2017-2789

When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy from the document. If both of these values are larger than the size of the buffer, the application will choose the smaller of the two and trust it to copy data...

CVE-2017-2789

CVE-2017-2789 affects JustSystems Ichitaro (Ichitaro Office) and its JTD processing of Figures/FigureData. The vulnerability is a heap-based buffer overflow caused when copying FigureData: the code computes two lengths to decide how much to copy, and if both exceed the allocated buffer, it trusts...