PT-2017-15537 · Justsystems · Justsystems Ichitaro Office
Publicado
2017-02-24
·
Atualizado
2022-04-19
·
CVE-2017-2789
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
JustSystems Ichitaro Office version 2016 Trial
Description
The issue arises when copying file data into a buffer. The application calculates two values to determine the amount of data to copy from the document. If both values exceed the buffer size, the application chooses the smaller value and uses it to copy data, leading to a heap-based buffer overflow. This overflow corrupts an offset in the heap used for pointer arithmetic, potentially allowing code execution under the context of the application.
Recommendations
For JustSystems Ichitaro Office version 2016 Trial, at the moment, there is no information about a newer version that contains a fix for this issue.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Justsystems Ichitaro Office