CVE-2017-10870
High
Description
Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) and Rakuraku Hagaki Select for Ichitaro (Ichitaro 2017, Ichitaro 2016, Ichitaro 2015, Ichitaro Pro3, Ichitaro Pro2, Ichitaro Pro, Ichitaro 2011, Ichitaro Government 8, Ichitaro Government 7, Ichitaro Government 6 and Ichitaro 2017 Trial version) allows attackers to execute arbitrary code with privileges of the application via specially crafted file.
SeverityHigh
CVSS7.8
Exploit probability—
ProductJustsystems Ichitaro
PublishedNov 2, 2017
First seenNov 2, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| justsystems ichitaro_2016 | No range specified | — |
| justsystems easy_postcard_2016 | No range specified | — |
| justsystems easy_postcard_2017 | No range specified | — |
| justsystems easy_postcard_2018 | No range specified | — |
| justsystems ichitaro_2017 | No range specified | — |
| justsystems ichitaro_2017_trial_version | No range specified | — |
| justsystems ichitaro_2018 | No range specified | — |
| justsystems ichitaro_government_6 | No range specified | — |
| justsystems ichitaro_government_7 | No range specified | — |
| justsystems ichitaro_government_8 | No range specified | — |
| justsystems ichitaro_pro | No range specified | — |
| justsystems ichitaro_pro_2 | No range specified | — |
| justsystems ichitaro_pro_2011 | No range specified | — |
| justsystems ichitaro_pro_3 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.