CVE Vulnerability Catalog

JustSystems Ichitaro 2016 Trial contains a vulnerability that occurs when trying to open a specially crafted PowerPoint file. The application incorrectly handles the error case for a function's result, leading to reading data from the file into an invalid memory address.

CVE-2017-2790 affects JustSystems Ichitaro Office, where processing a record type of 0x3c from an Excel (.xls) file leads to a buffer overflow due to incorrect size calculation. Trusting the size to be greater than zero results in a heap-based buffer overflow, potentially allowing code execution in the application's context.

CVE-2017-2789 affects JustSystems Ichitaro Office 2016 Trial, where during the copying of file data into a buffer, the application may choose a value larger than the buffer size, leading to a heap-based buffer overflow. This overflow can allow code execution under the context of the application.

Plone versions 4.0 through 5.1a1 lack security declarations for Dexterity content-related WebDAV requests, allowing remote attackers to gain WebDAV access via unspecified vectors.

Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.

IBM Jazz for Service Management versions 1.1.2.1 and 1.1.3 are vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions on behalf of a trusted user.

IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server.

The do_shmat function in the Linux kernel through version 4.9.12 does not restrict the address calculated by a certain rounding operation, allowing local users to map page zero. This enables bypassing a protection mechanism for the mmap system call.

An issue was discovered in tnef before 1.4.13 related to four type confusions in the file_add_mapi_attrs() function. This may lead to invalid read and write operations controlled by an attacker.

An issue was discovered in tnef before version 1.4.13 related to two type confusions in the parse_file() function. This may lead to invalid read and write operations controlled by an attacker.

An issue was discovered in tnef before version 1.4.13 related to integer overflows that can lead to heap overflows in functions handling memory allocation.

An issue was discovered in tnef before version 1.4.13 related to two OOB Write operations in the mapi_attr_read() function. These may lead to invalid read and write operations controlled by an attacker.

An issue was discovered in ytnef before version 1.9.1 related to directory traversal using the filename, associated with the SanitizeFilename function in settings.c.

An issue was discovered in ytnef before version 1.9.1 related to a patch described as '8 of 9. Out of Bounds read and write.'

An issue was discovered in ytnef before version 1.9.1 related to a patch described as '7 of 9. Out of Bounds read.'

An issue was discovered in ytnef before version 1.9.1 related to invalid write and integer overflow, which may lead to unauthorized access or data corruption.

An issue was discovered in ytnef before version 1.9.1 related to an integer overflow, described as '5 of 9'.

An issue was discovered in ytnef before version 1.9.1 related to out of bounds reads.

An issue was discovered in ytnef before 1.9.1 related to a buffer overflow in the version field in lib/tnef-types.h.

An issue was discovered in ytnef before version 1.9.1 related to null pointer dereference and unchecked return value from calloc.