A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutBox stream record types. A specially crafted document can cause a buffer overflow, leading to memory corruption, which can result in arbitrary code execution.To trigger this vulnerability, the victim would need to open a malicious, attacker-created document.

A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutBox stream record types. A specially crafted document can cause a buffer overflow, leading to memory corruption, which can result in arbitrary code execution.To trigger this vulnerability, the victim would need to open a malicious, attacker-created document.

Multiple products provided by JustSystems Corporation contain multiple vulnerabilities listed below. <ul><li>Use After Free (CWE-416) - CVE-2022-43664</li> <li>Heap-based Buffer Overflow (CWE-122) - CVE-2022-45115</li> <li>Free of Memory not on the Heap (CWE-590) - CVE-2023-22291</li> <li>Heap-based Buffer Overflow (CWE-122) - CVE-2023-22660</li></ul> Cisco Talos Security Intelligence & Research Group reported these vulnerabilities to JustSystems Corporation and coordinated. JustSystems Corporation and JPCERT/CC published respective advisories in order to notify users of the solutions through JVN.