CVE-2023-38128

Name of the Vulnerable Software and Affected Versions Ichitaro 2023 version 1.0.1.59372

Description An out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser. A specially crafted document can cause a type confusion, which can lead to memory corruption and eventually arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Recommendations For Ichitaro 2023 version 1.0.1.59372, consider avoiding the use of the "HyperLinkFrame" stream parser until a patch is available. As a temporary workaround, restrict the opening of documents from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.