PT-2017-15539 · Justsystems · Justsystems Ichitaro

Published 2017-02-24 · Updated 2022-04-19 · CVE-2017-2791

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JustSystems Ichitaro version 2016 Trial

Description The issue arises when the application attempts to open a specially crafted PowerPoint file, leading to incorrect error handling for a function's result. This result is then used in a pointer calculation for reading file data, causing the application to read data into an invalid address and corrupt memory. Under specific conditions, this can result in code execution under the context of the application.

Recommendations For JustSystems Ichitaro version 2016 Trial, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-2791

Affected Products

Justsystems Ichitaro

References · 4

• https://osv.dev/vulnerability/CVE-2017-2791 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2791 · Security Note
• http://talosintelligence.com/reports/TALOS-2016-0199 · Note
• http://securityfocus.com/bid/96440 · Note