The vulnerability of the ICU regular expression processing service in Google Chrome and the International Components for Unicode library allows a perpetrator to cause a service failure or exert other effects.

🗓️ 18 May 2017 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Out-of-bounds operation in ICU regex processing for Chrome and ICU library can cause corruption.

Reporter	Title	Published	Views	Family All 85
IBM Security Bulletins	Security Bulletin: Vulnerability in icu affects IBM Flex System Chassis Management Module (CVE-2014-9654)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in icu affects IBM Flex System Manager (FSM) (CVE-2014-9654)	18 Jun 201801:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics	25 Jul 201918:55	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilties have been addressed in IBM Cognos Analytics	13 Sep 201916:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence has addressed multiple vulnerabilties	19 Dec 201921:01	–	ibm
IBM Security Bulletins	Security Bulletin: TADDM is vulnerable to a denial of service due to vulnerabilities in ICU4J Library	26 Apr 202314:21	–	ibm
CNVD	Google Chrome International Components for Unicode for C/C++ Denial of Service Vulnerability	25 Apr 201700:00	–	cnvd
CVE	CVE-2014-9654	24 Apr 201706:12	–	cve
Cvelist	CVE-2014-9654	24 Apr 201706:12	–	cvelist
Debian	[SECURITY] [DLA 219-1] icu security update	14 May 201509:45	–	debian

Vulners

Node

google google_chromeRange≤40.0.2214.91

Source	Link
bugs	www.bugs.icu-project.org/trac/changeset/36801
bugs	www.bugs.icu-project.org/trac/ticket/11371
openwall	www.openwall.com/lists/oss-security/2015/02/05/15
chromium	www.chromium.googlesource.com/chromium/deps/icu/+/dd727641e190d60e4593bcb3a35c7f51eb4925c5
code	www.code.google.com/p/chromium/issues/detail
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 27.5

EPSS0.01671

icu library chrome vulnerability memory corruption crafted string out of bounds