CVE-2017-10870

Published: Nov 2, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) and Rakuraku Hagaki Select for Ichitaro (Ichitaro 2017, Ichitaro 2016, Ichitaro 2015, Ichitaro Pro3, Ichitaro Pro2, Ichitaro Pro, Ichitaro 2011, Ichitaro Government 8, Ichitaro Government 7, Ichitaro Government 6 and Ichitaro 2017 Trial version) allows attackers to execute arbitrary code with privileges of the application via specially crafted file.

Affected (14)

Products: Justsystems: Easy Postcard 2016, Easy Postcard 2017, Easy Postcard 2018, Ichitaro 2016, Ichitaro 2017, Ichitaro 2017 Trial Version, Ichitaro 2018, Ichitaro Government 6, Ichitaro Government 7, Ichitaro Government 8, Ichitaro Pro, Ichitaro Pro 2, Ichitaro Pro 2011, Ichitaro Pro 3

14 products

Ichitaro 2017 Trial Version

Ichitaro 2018

Ichitaro Government 6

Ichitaro Government 7

Ichitaro Government 8

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Justsystems Easy Postcard 2016	All versions
Justsystems Easy Postcard 2017	All versions
Justsystems Easy Postcard 2018	All versions
Justsystems Ichitaro 2016	All versions
Justsystems Ichitaro 2017	All versions
Justsystems Ichitaro 2017 Trial Version	All versions
Justsystems Ichitaro 2018	All versions
Justsystems Ichitaro Government 6	All versions
Justsystems Ichitaro Government 7	All versions
Justsystems Ichitaro Government 8	All versions
Justsystems Ichitaro Pro	All versions
Justsystems Ichitaro Pro 2	All versions
Justsystems Ichitaro Pro 2011	All versions
Justsystems Ichitaro Pro 3	All versions