PT-2017-15537 · Justsystems · Justsystems Ichitaro Office

Published 2017-02-24 · Updated 2022-04-19 · CVE-2017-2789

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JustSystems Ichitaro Office version 2016 Trial

Description The issue arises when copying file data into a buffer. The application calculates two values to determine the amount of data to copy from the document. If both values exceed the buffer size, the application chooses the smaller value and uses it to copy data, leading to a heap-based buffer overflow. This overflow corrupts an offset in the heap used for pointer arithmetic, potentially allowing code execution under the context of the application.

Recommendations For JustSystems Ichitaro Office version 2016 Trial, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-2789

Affected Products

Justsystems Ichitaro Office

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-2789 · Security Note
• http://securityfocus.com/bid/96438 · Note
• http://talosintelligence.com/reports/TALOS-2016-0196 · Note