39 matches found
EUVD-2015-8493
Malware in sbrugna...
EUVD-2014-7790
Malware in sbrugna...
Stack Overflow
ChakraCore is vulnerable to stack buffer overflow. The vulnerability is due to the Collator object, which can result in a stack overflow during string comparisons resulting in an application crash...
K71059632: PHP vulnerability CVE-2015-8616
Security Advisory Description Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collatorsort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact by leveraging the...
SUSE CVE-2014-7940
The collator implementation in i18n/ucol.cpp in International Components for Unicode ICU 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have...
SUSE CVE-2015-8616
Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collatorsort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact by leveraging the relationships between a key buffer...
icu:collator_rulebased_fuzzer: Crash in icu_70::UCharsTrie::branchNext
Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=5448661421654016 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: collatorrulebasedfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f26c3fa77e0 Cras...
icu:collator_rulebased_fuzzer: Crash in icu_68::CEFinalizer::modifyCE
Detailed Report: https://oss-fuzz.com/testcase?key=5738172053061632 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7040003f8120 Crash State: icu68::CEFinalizer::modifyCE...
icu:collator_rulebased_fuzzer: Crash in icu_68::UCharsTrie::branchNext
Detailed Report: https://oss-fuzz.com/testcase?key=5360850326126592 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f5b85a95b74 Crash State: icu68::UCharsTrie::branchNext...
icu:collator_rulebased_fuzzer: Use-of-uninitialized-value in icu_68::Collation::incThreeBytePrimaryByOffset
Detailed Report: https://oss-fuzz.com/testcase?key=4786521406308352 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
PT-2020-22411
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 3 crash type was identified, related to a fuzzer test. The crash state is associated with the collator compare fuzzer.cpp file...
EulerOS 2.0 SP5 : icu (EulerOS-SA-2019-2159)
According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The Regular Expressions package in International Components for Unicode ICU 52 before SVN revision 292944, as used in Google Chrome before...
icu/collator_rulebased_fuzzer: Use-of-uninitialized-value in isMatchAtCPBoundary
Detailed report: https://oss-fuzz.com/testcase?key=5644492876546048 Project: icu Fuzzer: libFuzzericucollatorrulebasedfuzzer Fuzz target binary: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
Microsoft Edge - Internationalization Initialization Type Confusion (MS16-144) Exploit
Exploit for windows platform in category dos / poc 1; , set: function ; function f var i = Intl; Intl = ; // this somehow prevents an exception that prevents laoding di, "Collator", noobj;...
Microsoft Edge - Internationalization Initialization Type Confusion (MS16-144)
1; , set: function ; function f var i = Intl; Intl = ; // this somehow prevents an exception that prevents laoding di, "Collator", noobj; Object.defineProperty = f; var q = new Intl.NumberFormat"en";...
The vulnerability of the International Components for Unicode library allows a attacker to trigger a service failure or cause other adverse effects.
The vulnerability of the collator implementation i18n/ucol.cpp in the International Components for Unicode library is related to resource management errors. Exploiting this vulnerability may allow a malicious actor to cause service failures or other effects through a specially crafted sequence of...
The vulnerability of the PHP interpreter, which allows attackers to trigger a service failure or exert other effects.
The vulnerability of the Collator::sortWithSortKeys function ext/intl/collator/collatorsort.c in the PHP interpreter is related to the use of memory after it is freed. Exploiting this vulnerability may allow a remote attacker to cause a service failure termination of the application, or possibly...
PHP Memory Misreference Vulnerability
PHP is a widely used general purpose scripting language. A memory misreference vulnerability exists in the function Collator::sortWithSortKeys in ext/intl/collator/collatorsort.c in version 7.x of PHP prior to 7.0.1, which can be exploited by a remote attacker to cause a denial of service...
CVE-2015-8616
Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collatorsort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact by leveraging the relationships between a key buffer...
Design/Logic Flaw
Use-after-free vulnerability in the Collator::sortWithSortKeys function in ext/intl/collator/collatorsort.c in PHP 7.x before 7.0.1 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact by leveraging the relationships between a key buffer...