Vulnerabilities > Justsystems > Ichitaro PRO 5

DATE CVE VULNERABILITY TITLE RISK
2023-10-19 CVE-2023-34366 Use After Free vulnerability in Justsystems products
A use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023 1.0.1.59372.
local
low complexity
justsystems CWE-416
7.8
2023-10-19 CVE-2023-38127 Integer Overflow or Wraparound vulnerability in Justsystems products
An integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372.
local
low complexity
justsystems CWE-190
7.8
2023-10-19 CVE-2023-38128 Out-of-bounds Write vulnerability in Justsystems products
An out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372.
local
low complexity
justsystems CWE-787
7.8
2023-10-19 CVE-2023-35126 Out-of-bounds Write vulnerability in Justsystems products
An out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles" and "DocumentEditStyles" streams of Ichitaro 2023 1.0.1.59372 when processing types 0x0000-0x0009 of a style record with the type 0x2008.
local
low complexity
justsystems CWE-787
7.8
2022-08-16 CVE-2022-36344 Unquoted Search Path or Element vulnerability in Justsystems products
An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others.
network
low complexity
justsystems CWE-428
critical
9.8