CVEvulnerability

CVE-2023-35126

7.8 HIGH Published 2023-10-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-129, CWE-787

Description

An out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles" and "DocumentEditStyles" streams of Ichitaro 2023 1.0.1.59372 when processing types 0x0000-0x0009 of a style record with the type 0x2008. A specially crafted document can cause memory corruption, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected configurations

• justsystems easy postcard max • justsystems ichitaro 2021 • justsystems ichitaro 2022 • justsystems ichitaro 2023 1.0.1.59372 • justsystems ichitaro government 10 • justsystems ichitaro government 8 • justsystems ichitaro government 9 • justsystems ichitaro pro 3 • justsystems ichitaro pro 4 • justsystems ichitaro pro 5 • justsystems just government 3 • justsystems just government 4 • justsystems just government 5 • justsystems just office 3 • justsystems just office 4 • justsystems just office 5 • justsystems just police 3 • justsystems just police 4 • justsystems just police 5

Related

Weakness · CWE (2)

  • CWE-129 Improper Validation of Array Index weakness
  • CWE-787 Out-of-bounds Write weakness

References