CVE-2017-2791

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data into. Due to this, the application will read data from the file into an invalid address thus corrupting memory. Under the right conditions, this can lead to code execution under the context of the application.
Configurations

Configuration 1 (hide)

cpe:2.3:a:justsystems:ichitaro:2016:*:*:*:trial:*:*:*

History

No history.

Information

Published : 2017-02-24 22:59

Updated : 2024-02-04 19:11


NVD link : CVE-2017-2791

Mitre link : CVE-2017-2791

CVE.ORG link : CVE-2017-2791


JSON object : View

Products Affected

justsystems

  • ichitaro
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer