Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-38127

Published: 19/10/2023 Updated: 25/10/2023
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 0
Subscribe to Justsystems

Vulnerability Summary

An integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause the parser to make an under-sized allocation, which can later allow for memory corruption, potentially resulting in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

justsystems ichitaro government 8 -

justsystems ichitaro pro 3 -

justsystems ichitaro 2022 -

justsystems ichitaro 2021 -

justsystems easy postcard max -

justsystems just office 5 -

justsystems just office 4 -

justsystems just office 3 -

justsystems just government 5 -

justsystems just government 4 -

justsystems just government 3 -

justsystems just police 5 -

justsystems just police 4 -

justsystems just police 3 -

justsystems ichitaro pro 5 -

justsystems ichitaro pro 4 -

justsystems ichitaro government 10 -

justsystems ichitaro government 9 -

justsystems ichitaro 2023 1.0.1.59372

References

CWE-190https://jvn.jp/en/jp/JVN28846531/index.htmlhttps://talosintelligence.com/vulnerability_reports/TALOS-2023-1808https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693CVE-2024-30851CVE-2024-34460CVE-2024-2887localCVE-2024-27956remote code executionCVE-2024-34475privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook