PT-2017-15539 · Justsystems · Justsystems Ichitaro

Publicado 2017-02-24 · Atualizado 2022-04-19 · CVE-2017-2791

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JustSystems Ichitaro version 2016 Trial

Description The issue arises when the application attempts to open a specially crafted PowerPoint file, leading to incorrect error handling for a function's result. This result is then used in a pointer calculation for reading file data, causing the application to read data into an invalid address and corrupt memory. Under specific conditions, this can result in code execution under the context of the application.

Recommendations For JustSystems Ichitaro version 2016 Trial, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-2791

Produtos afetados

Justsystems Ichitaro

Referências · 4

• http://talosintelligence.com/reports/TALOS-2016-0199 · Nota
• https://osv.dev/vulnerability/CVE-2017-2791 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-2791 · Nota de Segurança
• http://securityfocus.com/bid/96440 · Nota