CVE-2017-2789

CVE-2017-2789 affects JustSystems Ichitaro (Ichitaro Office) and its JTD processing of Figures/FigureData. The vulnerability is a heap-based buffer overflow caused when copying FigureData: the code computes two lengths to decide how much to copy, and if both exceed the allocated buffer, it trusts...

CVE-2017-2790

CVE-2017-2790 affects JustSystems Ichitaro Office (Excel .xls handling). A heap-based buffer overflow arises when processing a Workbook record type 0x3c: the code reads a size, subtracts one, and uses the result as the memcpy length. An unchecked integer underflow (size becomes 0xffff) can be tri...

CVE-2008-3919

CVE-2008-3919 : The vulnerability affects multiple JustSystems Ichitaro products, where an unspecified flaw in JTD document handling allows an attacker to achieve remote code execution by supplying a crafted JTD document. Public reporting notes the issue was exploited in the wild in August 2008 ....

CVE-2012-1242

CVE-2012-1242 affects multiple JustSystems products (Ichitaro 2006–2011 family, Ichitaro Government 2006–2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School/JUST Jump 4/JUST Frontier, oreplug). The underlying issue is an insecure DLL search path that can cause the application to lo...

CVE-2010-3915

CVE-2010-3915 concerns JustSystems Ichitaro (2004–2010). Public sources describe multiple remote code execution vulnerabilities that can be triggered by opening a crafted document, enabling arbitrary code execution on affected hosts. The OpenVAS entries explicitly label multiple RCE vulnerabiliti...

CVE-2009-4737

CVE-2009-4737 corresponds to a stack-based buffer overflow in JustSystems Ichitaro (Ichitaro 13; 2004–2009; Viewer 2009 19.0.1.0 and earlier) triggered by parsing certain Rich Text Files (RTF), specifically related to the phrases pvpara ffooter. The vulnerability allows context-dependent attacker...

CVE-2014-2003

CVE-2014-2003 affects JustSystems products that bundle the JUST Online Update (e.g., Ichitaro) up through 2014. The issue is a flaw in how update-module signatures are validated, allowing a remote attacker to spoof modules and execute arbitrary code via a crafted signature. Root cause: insufficie...

CVE-2012-0269

CVE-2012-0269 is a buffer overflow vulnerability in multiple JustSystems products (e.g., Ichitaro 2011 Sou, 2006–2011, Ichitaro Government 2006–2010, Ichitaro Portable with oreplug, Ichitaro Viewer, JUST School, JUST Jump 4, JUST Frontier, Shuriken Pro4, Shuriken CE, Rekishimail Sengokubusho no m...

CVE-2010-1424

CVE-2010-1424 affects JustSystems Ichitaro and Ichitaro Government (2006–2010). A vulnerability in a crafted font file could allow a user-assisted remote attacker to execute arbitrary code. The issue is described as unspecified in some sources, but multiple connected documents confirm the softwar...

CVE-2013-5990

CVE-2013-5990 affects JustSystems Ichitaro family (various 2006–2013 versions, Government, Pro/Viewer, oreplug). A crafted document may allow remote arbitrary-code execution. Root cause is an unspecified error in handling certain documents, enabling code execution with the user’s privileges. Seve...

CVE-2017-2791

Summary of findings (CVE-2017-2791) : JustSystems Ichitaro 2016 Trial is vulnerable during handling of PowerPoint content. The attacker can craft a chain of records via the Current User and UserEditAtom paths (PowerPoint Document stream) to induce memory corruption. The root cause is lack of vali...

CVE-2013-0707

The CVE-2013-0707 issue affects JustSystems products (Ichitaro 2006/2007, Ichitaro Government, Ichitaro Portable with oreplug, Hanako 2006–2013, Hanako Police variants) and is described as an arbitrary-code execution vulnerability triggered by processing a crafted file. The connected sources (JVN...

CVE-2013-3644

CVE-2013-3644 affects JustSystems Ichitaro family (Ichitaro 2006–2013, Ichitaro Pro up to 2, Ichitaro Government 6–7 and 2006–2010, Ichitaro Portable with oreplug, Ichitaro Viewer, and Ichitaro JUST School through 2010). The issue is described as an unspecified vulnerability that may allow remote...

CVE-2014-7247

Summary (CVE-2014-7247) : The vulnerability affects JustSystems Ichitaro family (2008–2014 Tetsu, Gov., Pro, Pro 2, Sou/Shou/Gen variants). It enables remote code execution when a user opens a crafted file, due to an unspecified flaw in the affected software. Multiple connected sources corroborat...

CVE-2010-3916

Consolidated data from the connected docs show JustSystems Ichitaro (including Ichitaro Government) is affected by multiple remote code execution vulnerabilities (CVE-2010-3915 and CVE-2010-3916) that can be triggered by opening a crafted document. The OpenVAS entries describe these as remote cod...

CVE-2011-1331

CVE-2011-1331 affects JustSystems Ichitaro family (Ichitaro 2005–2011, Ichitaro Government 6, 2006–2010, Ichitaro Portable, Ichitaro Pro, Ichitaro Viewer). The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service via a crafted document, due to heap memory ...

CVE-2010-2152

CVE-2010-2152 affects JustSystems Ichitaro family (Ichitaro 2004–2009, Ichitaro Government 2006–2009, Just School 2008–2009). The vulnerability allows remote code execution through unknown vectors related to “product character attribute processing” in a document. Exploitation details are not publ...