International Components for Unicode Integer Overflow Vulnerability

🗓️ 06 May 2015 00:00:00Reported by China National Vulnerability DatabaseType

Integer overflow in International Components for Unicode prior to 55.1 can cause denial of service or code execution via resolveImplicitLevels in ubidi.c.

Reporter	Title	Published	Views	Family All 69
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in ICU libraries used in IBM DataPower Gateway	10 Sep 202114:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway Virtual Edition uses out of date ICU libraries in open-vm-tools	2 Jun 202212:50	–	ibm
Tenable Nessus	Apple iOS < 9.0 Multiple Vulnerabilities	15 Oct 201500:00	–	nessus
Tenable Nessus	Mac OS X < 10.11 Multiple Vulnerabilities	28 Oct 201500:00	–	nessus
Tenable Nessus	Debian DSA-3323-1 : icu - security update	3 Aug 201500:00	–	nessus
Tenable Nessus	GLSA-201507-04 : International Components for Unicode: Multiple vulnerabilities	8 Jul 201500:00	–	nessus
Tenable Nessus	Mac OS X < 10.11 Multiple Vulnerabilities (GHOST)	5 Oct 201500:00	–	nessus
Tenable Nessus	openSUSE Security Update : Qt 5 (openSUSE-2015-953)	29 Dec 201500:00	–	nessus
Tenable Nessus	openSUSE Security Update : LibreOffice and related libraries (openSUSE-2016-273)	29 Feb 201600:00	–	nessus
Tenable Nessus	openSUSE Security Update : icu (openSUSE-2017-1011)	6 Sep 201700:00	–	nessus

Source	Link
bugs	www.bugs.icu-project.org/trac/changeset/37080

07 May 2015 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 27.5

EPSS0.23352