CVE-2017-2791 Memory corruption in Ichitaro

What is CVE-2017-2791?

CVE-2017-2791 is a high-severity memory corruption vulnerability in JustSystems Ichitaro, published on 24 Feb 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data into. Due to this, the application will read data from the file into an invalid address thus corrupting memory. Under the right conditions, this can lead to code execution under the context of the application.

Weakness: CWE-119

Which versions are affected by CVE-2017-2791?

It affects 1 product.

Products include Justsystems Ichitaro.

How do I fix CVE-2017-2791?

No fix has been published for CVE-2017-2791 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2017-2791 being exploited?

There is no known exploitation of CVE-2017-2791 in the wild and no public exploit code.

Other vulnerabilities in JustSystems Ichitaro

• CVE-2014-7247 Other in n/a Critical 10.0
• CVE-2013-3644 Code injection in n/a Critical 10.0
• CVE-2013-5990 Code injection in n/a Critical 9.3
• CVE-2012-0269 Memory corruption in n/a Critical 9.3
• CVE-2011-1331 Memory corruption in n/a Critical 9.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-c8jg-8x69-pcr4.