CVE-2017-10870 - Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) and Rakuraku Hagaki Select for Ichitaro (Ichitaro 2017, Ichitaro 2016, Ichitaro 2015, Ichitaro Pro3, Ichitaro Pro2, Ichitaro Pro, Ichitaro 2011, Ichitaro Government 8, Ichitaro Government 7, Ichitaro Government 6 and Ichitaro 2017 Trial version) allows attackers to execute arbitrary code with privileges of the application via specially crafted file

Back Back to CVE browser

HIGH

Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) and Rakuraku Hagaki Select for Ichitaro (Ichitaro 2017, Ichitaro 2016, Ichitaro 2015, Ichitaro Pro3, Ichitaro Pro2, Ichitaro Pro, Ichitaro 2011, Ichitaro Government 8, Ichitaro Government 7, Ichitaro Government 6 and Ichitaro 2017 Trial version) allows attackers to execute arbitrary code with privileges of the application via specially crafted file

Published Nov 2, 2017

7.8

HIGH

CVSS 3.0

EPSS 1.31%

Description

Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) and Rakuraku Hagaki Select for Ichitaro (Ichitaro 2017, Ichitaro 2016, Ichitaro 2015, Ichitaro Pro3, Ichitaro Pro2, Ichitaro Pro, Ichitaro 2011, Ichitaro Government 8, Ichitaro Government 7, Ichitaro Government 6 and Ichitaro 2017 Trial version) allows attackers to execute arbitrary code with privileges of the application via specially crafted file.

Affected products

Vendor Justsystem Product Rakuraku Hagaki Default
n/a
- Version
  Rakuraku Hagaki 2016
  Status
  affected
  Constraints
  -
- Version
  Rakuraku Hagaki 2017
  Status
  affected
  Constraints
  -
- Version
  Rakuraku Hagaki 2018
  Status
  affected
  Constraints
  -
Vendor Justsystem Product Rakuraku Hagaki Select for Ichitaro Default
n/a
- Version
  Ichitaro 2011
  Status
  affected
  Constraints
  -
- Version
  Ichitaro 2015
  Status
  affected
  Constraints
  -
- Version
  Ichitaro 2016
  Status
  affected
  Constraints
  -
- Version
  Ichitaro 2017
  Status
  affected
  Constraints
  -
- Version
  Ichitaro 2017 Trial version
  Status
  affected
  Constraints
  -
- Version
  Ichitaro Government 6
  Status
  affected
  Constraints
  -
- Version
  Ichitaro Government 7
  Status
  affected
  Constraints
  -
- Version
  Ichitaro Government 8
  Status
  affected
  Constraints
  -
- Version
  Ichitaro Pro
  Status
  affected
  Constraints
  -
- Version
  Ichitaro Pro2
  Status
  affected
  Constraints
  -
- Version
  Ichitaro Pro3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Justsystem

Rakuraku Hagaki

n/a

Version	Status	Constraints
Rakuraku Hagaki 2016	affected	-
Rakuraku Hagaki 2017	affected	-
Rakuraku Hagaki 2018	affected	-

Justsystem

Rakuraku Hagaki Select for Ichitaro

n/a

Version	Status	Constraints
Ichitaro 2011	affected	-
Ichitaro 2015	affected	-
Ichitaro 2016	affected	-
Ichitaro 2017	affected	-
Ichitaro 2017 Trial version	affected	-
Ichitaro Government 6	affected	-
Ichitaro Government 7	affected	-
Ichitaro Government 8	affected	-
Ichitaro Pro	affected	-
Ichitaro Pro2	affected	-
Ichitaro Pro3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (2)

https://jvn.jp/en/vu/JVNVU93703434/index.html
x_refsource_MISCThird Party AdvisoryVDB Entry
https://www.justsystems.com/jp/info/js17003.html
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://jvn.jp/en/vu/JVNVU93703434/index.html		x_refsource_MISCThird Party AdvisoryVDB Entry
https://www.justsystems.com/jp/info/js17003.html		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jpcert

Published Nov 2, 2017

Updated Aug 5, 2024

Reserved Jul 4, 2017

Link CVE-2017-10870

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-10870

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-10870