CVE-2023-38128
Vulnerability from cvelistv5
Published
2023-10-19 17:00
Modified
2024-09-12 19:08
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Summary
An out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause a type confusion, which can lead to memory corruption and eventually arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
References
talos-cna@cisco.comhttps://jvn.jp/en/jp/JVN28846531/index.htmlThird Party Advisory
talos-cna@cisco.comhttps://talosintelligence.com/vulnerability_reports/TALOS-2023-1809Exploit, Third Party Advisory
talos-cna@cisco.comhttps://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1809Exploit, Third Party Advisory
Impacted products
Ichitaro 2023Ichitaro 2023
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T17:30:14.086Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1809",
            "tags": [
              "x_transferred"
            ],
            "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1809"
          },
          {
            "name": "https://jvn.jp/en/jp/JVN28846531/index.html",
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN28846531/index.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1809"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-38128",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-12T19:08:18.379467Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T19:08:27.600Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Ichitaro 2023",
          "vendor": "Ichitaro 2023",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.1.59372"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Discovered by a member of Cisco Talos."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write vulnerability exists in the \"HyperLinkFrame\" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause a type confusion, which can lead to memory corruption and eventually arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-843",
              "description": "CWE-843: Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-19T17:00:42.797Z",
        "orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
        "shortName": "talos"
      },
      "references": [
        {
          "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1809",
          "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1809"
        },
        {
          "name": "https://jvn.jp/en/jp/JVN28846531/index.html",
          "url": "https://jvn.jp/en/jp/JVN28846531/index.html"
        },
        {
          "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1809"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
    "assignerShortName": "talos",
    "cveId": "CVE-2023-38128",
    "datePublished": "2023-10-19T17:00:42.797Z",
    "dateReserved": "2023-07-17T22:09:40.438Z",
    "dateUpdated": "2024-09-12T19:08:27.600Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-38128\",\"sourceIdentifier\":\"talos-cna@cisco.com\",\"published\":\"2023-10-19T18:15:09.560\",\"lastModified\":\"2023-10-25T14:05:11.827\",\"vulnStatus\":\"Analyzed\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"An out-of-bounds write vulnerability exists in the \\\"HyperLinkFrame\\\" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause a type confusion, which can lead to memory corruption and eventually arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.\"},{\"lang\":\"es\",\"value\":\"Existe una vulnerabilidad de escritura fuera de l\u00edmites en el analizador de flujo \\\"HyperLinkFrame\\\" de Ichitaro 2023 1.0.1.59372. Un documento especialmente manipulado puede causar confusi\u00f3n de tipos, lo que puede provocar da\u00f1os en la memoria y, finalmente, la ejecuci\u00f3n de c\u00f3digo arbitrario. Un atacante puede proporcionar un archivo malicioso para desencadenar esta vulnerabilidad.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"talos-cna@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]},{\"source\":\"talos-cna@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-843\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:easy_postcard_max:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D68E98B0-38CA-4148-825D-CF7C8AABB5BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:ichitaro_2021:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1755383C-2B74-4DD7-9C9B-DB19C12CA94D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:ichitaro_2022:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1274E0AB-BDE0-45FB-B3A2-522E3AE4E41A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:ichitaro_2023:1.0.1.59372:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15B1DC82-380D-4CF4-AF35-4AF2A1CBF778\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:ichitaro_government_10:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A1C403A-6787-4347-AF6F-69F225944011\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:ichitaro_government_8:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E401B098-6551-4101-9906-19C2AB7A5504\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:ichitaro_government_9:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"65A56D02-7438-4319-BFD1-64FB11BC758C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:ichitaro_pro_3:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36AE4633-5418-4009-B51D-4A1F542B1A88\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:ichitaro_pro_4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"21A4F85C-EA95-4853-9A8C-C3C9142243A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:ichitaro_pro_5:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"76FAE0E6-1037-45AC-A277-8F32338A50AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:just_government_3:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"552D41EF-A5DB-4ED0-B404-FF2649969B11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:just_government_4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F61D3C1-0011-4D78-83F8-2349D46AFE59\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:just_government_5:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC99A5A2-32B0-4F38-A2B1-FAC50A05FBEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:just_office_3:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7814DB96-4078-47B8-93B2-5066029B6F65\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:just_office_4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D8E2A1A-7C06-491F-8A28-BE70EFCDDFFF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:just_office_5:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD6F3523-7059-4591-9D04-97D287128D6E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:just_police_3:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5ED46089-ED5B-4314-B079-A8932377475E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:just_police_4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3B6B97E-B202-4B1F-9B81-367CB7172DEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:justsystems:just_police_5:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B5D80C5-5821-416E-A3E3-ADC7F221B093\"}]}]}],\"references\":[{\"url\":\"https://jvn.jp/en/jp/JVN28846531/index.html\",\"source\":\"talos-cna@cisco.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://talosintelligence.com/vulnerability_reports/TALOS-2023-1809\",\"source\":\"talos-cna@cisco.com\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1809\",\"source\":\"talos-cna@cisco.com\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.