{"cve":"CVE-2017-10870","nvd":{"published":"2017-11-02T15:29:00.243","modified":"2026-06-17T01:00:50.953","status":"Modified","description":"Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) and Rakuraku Hagaki Select for Ichitaro (Ichitaro 2017, Ichitaro 2016, Ichitaro 2015, Ichitaro Pro3, Ichitaro Pro2, Ichitaro Pro, Ichitaro 2011, Ichitaro Government 8, Ichitaro Government 7, Ichitaro Government 6 and Ichitaro 2017 Trial version) allows attackers to execute arbitrary code with privileges of the application via specially crafted file.","cvss_v4":null,"cvss_v3":{"version":"3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":7.8},"cwes":["CWE-119"],"references":["https://jvn.jp/en/vu/JVNVU93703434/index.html","https://www.justsystems.com/jp/info/js17003.html","https://jvn.jp/en/vu/JVNVU93703434/index.html","https://www.justsystems.com/jp/info/js17003.html"],"products":["justsystems:easy_postcard_2016","justsystems:easy_postcard_2017","justsystems:easy_postcard_2018","justsystems:ichitaro_2016","justsystems:ichitaro_2017","justsystems:ichitaro_2017_trial_version","justsystems:ichitaro_2018","justsystems:ichitaro_government_6","justsystems:ichitaro_government_7","justsystems:ichitaro_government_8","justsystems:ichitaro_pro","justsystems:ichitaro_pro_2","justsystems:ichitaro_pro_2011","justsystems:ichitaro_pro_3"],"source":"nvd","synced_at":"2026-10-19T20:47:01.408438353+00:00"},"epss":{"cve":"CVE-2017-10870","score":0.01312,"percentile":0.70683,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}