Heap overflow

A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutBox stream record types. A specially crafted document can cause a buffer overflow, leading to memory corruption, which can result in arbitrary code execution.To trigger this...

Buffer overflow

A buffer overflow vulnerability exists in the Attribute Arena functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

Null pointer dereference

An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to an attempt to free a stack pointer, which causes memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

Vulnerability Spotlight: Vulnerabilities in popular Japanese word processing software could lead to arbitrary code execution, other issues

A Cisco Talos researcher discovered these vulnerabilities. Cisco Talos recently discovered four vulnerabilities in Ichitaro, a popular word processing software in Japan produced by JustSystems that could lead to arbitrary code execution. Ichitaro uses the ATOK input method IME and uses the...

CVE-2022-43664

A use-after-free vulnerability exists within the way Ichitaro Word Processor 2022, version 1.0.1.57600, processes protected documents. A specially crafted document can trigger reuse of freed memory, which can lead to further memory corruption and potentially result in arbitrary code execution. An...

CVE-2022-45115

A buffer overflow vulnerability exists in the Attribute Arena functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-45115

A buffer overflow vulnerability exists in the Attribute Arena functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-43664

CVE-2022-43664 affects Ichitaro Word Processor 2022 (version 1.0.1.57600). Cisco Talos and Red Hat advisories describe a use-after-free vulnerability in the handling of protected documents that can trigger memory reuse, causing memory corruption and potential arbitrary code execution when a speci...

CVE-2022-45115

CVE-2022-45115 concerns a buffer overflow in Ichitaro 2022 (version 1.0.1.57600) within the Attribute Arena processing of the file’s SummaryInformation stream. Cisco Talos documents a heap-based overflow caused by computing the arena size from two header fields of the 0x40 JSRV_SummaryInformation...

CVE-2022-43664

A use-after-free vulnerability exists within the way Ichitaro Word Processor 2022, version 1.0.1.57600, processes protected documents. A specially crafted document can trigger reuse of freed memory, which can lead to further memory corruption and potentially result in arbitrary code execution. An...

CVE-2023-22660

A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutBox stream record types. A specially crafted document can cause a buffer overflow, leading to memory corruption, which can result in arbitrary code execution.To trigger this...

CVE-2023-22291

An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to an attempt to free a stack pointer, which causes memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-22291

CVE-2023-22291 affects Ichitaro 2022 (version 1.0.1.57600) and is a Frame stream parser invalid free vulnerability that can lead to memory corruption when processing specially crafted JTD documents. Talos’ analysis confirms the vulnerability exists in the Frame stream handling within the JTD proc...

CVE-2023-22660

A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutBox stream record types. A specially crafted document can cause a buffer overflow, leading to memory corruption, which can result in arbitrary code execution.To trigger this...

CVE-2023-22291

An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to an attempt to free a stack pointer, which causes memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-22660

CVE-2023-22660 affects JustSystems Ichitaro 2022, version 1.0.1.57600, via a heap-based buffer overflow in processing certain LayoutBox stream records (Frame/LayoutBox) in JTD documents. A specially crafted document can trigger memory corruption, potentially enabling arbitrary code execution when...

Ichitaro 2022 安全漏洞

JustSystems Ichitaro is a Japanese word processing software from JustSystems. A security vulnerability exists in Ichitaro 2022 version 1.0.1.57600, which stems from an invalid release vulnerability that can be exploited by an attacker to cause memory corruption by releasing the stack pointer via...

JustSystems Ichitaro 安全漏洞

JustSystems Ichitaro is a Japanese word processing software from JustSystems Japan. A security vulnerability exists in JustSystems Ichitaro version 2022 1.0.1.57600. An attacker could exploit this vulnerability to cause a buffer overflow, which could lead to arbitrary code execution...

JustSystems Corporation Ichitaro Attribute Arena buffer overflow vulnerability

Talos Vulnerability Report TALOS-2022-1684 JustSystems Corporation Ichitaro Attribute Arena buffer overflow vulnerability April 5, 2023 CVE Number CVE-2022-45115 SUMMARY A buffer overflow vulnerability exists in the Attribute Arena functionality of Ichitaro 2022 1.0.1.57600. A specially crafted...

JustSystems Corporation Ichitaro "LayoutBox" stream heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1722 JustSystems Corporation Ichitaro "LayoutBox" stream heap-based buffer overflow vulnerability April 5, 2023 CVE Number CVE-2023-22660 SUMMARY A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain...