CVE-2023-38127

Summary

CVE-2023-38127 is a vulnerability affecting Ichitaro 2023 1.0.1.59372. The issue lies in the "HyperLinkFrame" stream parser where an integer overflow occurs. A maliciously crafted document can cause the parser to make an under-sized allocation, leading to memory corruption. This corruption may result in arbitrary code execution, allowing an attacker to potentially gain control of the affected system by providing a specially crafted file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.