Lucene search

K
mageiaGentoo FoundationMGASA-2015-0102
HistoryMar 10, 2015 - 7:48 p.m.

Updated icu packages fix security vulnerability

2015-03-1019:48:25
Gentoo Foundation
advisories.mageia.org
29

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

81.3%

It was discovered that ICU incorrectly handled memory operations when processing fonts. If an application using ICU processed crafted data, an attacker could cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program (CVE-2014-6585, CVE-2014-6591).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchicu< 52.1-2.2icu-52.1-2.2.mga4

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.008 Low

EPSS

Percentile

81.3%