Vulnerability Spotlight: Multiple Ichitaro Office Vulnerabilities
Summary: Cisco Talos discovered three code-execution vulnerabilities in JustSystems' Ichitaro Office, a popular word processor in Japan, reported to the vendor in September and not addressed until February 23rd. The flaws cover .jtd Figure stream parsing (CVE-2017-2789), handling of Excel .xls record type 0x3c (CVE-2017-2790), and a PersistDirectory issue in the word processor (CVE-2017-2791), each leading to heap-based buffer overflow or memory corruption and code execution under the application's context.
What's compelling: Three code-execution flaws in a widely used Japanese word processor went unpatched for roughly five months after Talos reported them in September, leaving users exposed to malicious documents for that entire window.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2017-2789CVE-2017-2790CVE-2017-2791
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026