CVE-2017-10870

Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) and Rakuraku Hagaki Select for Ichitaro (Ichitaro 2017, Ichitaro 2016, Ichitaro 2015, Ichitaro Pro3, Ichitaro Pro2, Ichitaro Pro, Ichitaro 2011, Ichitaro Government 8, Ichitaro Government 7, Ichitaro Government 6 and Ichitaro 2017 Trial version) allows attackers to execute arbitrary code with privileges of the application via specially crafted file.

• CWE-119

• https://jvn.jp/en/vu/JVNVU93703434/index.htmlThird Party Advisory, VDB Entry
• https://www.justsystems.com/jp/info/js17003.htmlPatch, Vendor Advisory
• https://jvn.jp/en/vu/JVNVU93703434/index.htmlThird Party Advisory, VDB Entry
• https://www.justsystems.com/jp/info/js17003.htmlPatch, Vendor Advisory

Published

Nov 2, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10863Untrusted search path vulnerability in HIBUN Confidential Fi…
• CVE-2017-10864Untrusted search path vulnerability in Installer of HIBUN Co…
• CVE-2017-10865Untrusted search path vulnerability in HIBUN Confidential Fi…
• CVE-2017-10868H2O version 2.2.2 and earlier allows remote attackers to cau…7.5
• CVE-2017-10869Buffer overflow in H2O version 2.2.2 and earlier allows remo…
• CVE-2017-1087In FreeBSD 10.x before 10.4-STABLE, 10.4-RELEASE-p3, and 10.…
• CVE-2017-10871Buffer overflow in NTT DOCOMO Wi-Fi STATION L-02F Software v…
• CVE-2017-10872H2O version 2.2.3 and earlier allows remote attackers to cau…
• CVE-2017-10873OpenAM (Open Source Edition) allows an attacker to bypass au…8.1
• CVE-2017-10874PWR-Q200 does not use random values for source ports of DNS …
• CVE-2017-10875I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows …
• CVE-2017-1088In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE…