USN-2605-1 icu vulnerabilities

Pedro Ribeiro discovered that ICU incorrectly handled certain memory operations when processing data. If an application using ICU processed crafted data, an attacker could cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program...

International Components for Unicode Heap Buffer Overflow Vulnerability

International Components for Unicode is a mature and widely used set of libraries and tools for Unicode support, software internationalization and software globalization. A heap buffer overflow vulnerability exists in versions prior to ICU 55.1, which stems from an error in the...

The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the icu-4.2.1 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...

The vulnerability of the library for working with Unicode International Components for Unicode, related to a resource management mechanism error, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Unicode International Components for Unicode library is related to a resource management mechanism error. Exploiting this vulnerability allows an attacker to remotely access confidential data, compromise its integrity, and cause service failures...

UBUNTU-CVE-2014-9654

The Regular Expressions package in International Components for Unicode ICU for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of...

Google Chrome ICU Uninitialization Vulnerability

Google Chrome is a popular WEB browser. Google Chrome ICU suffers from an uninitialized vulnerability due to the program failing to properly initialize structural data. The vulnerability allows an attacker to construct a malicious WEB page and trick the user into parsing it, which can be used to...

Google Chrome Denial of Service Vulnerability (CNVD-2015-00672)

Google Chrome is a web browser developed by Google, Inc.International Components for Unicode ICU is a Unicode-supported, software internationalization, globalization C/C++ and Java library. A security vulnerability exists in the Regular Expressions package in versions of ICU 52 SVN revision 29294...

DEBIAN-CVE-2014-7926

The Regular Expressions package in International Components for Unicode ICU 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via vectors related to a...

UBUNTU-CVE-2014-7940

The collator implementation in i18n/ucol.cpp in International Components for Unicode ICU 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have...

UBUNTU-CVE-2014-8146

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service...

ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540)

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality via unknown vectors related to 2D...

Use-after-free vulnerability in multiple products that use International Components for Unicode (ICU)

Overview Multiple products that use International Components for Unicode ICU contain a use-after-free vulnerability. International Components for Unicode ICU is a library for handling Unicode strings. A C version, ICU4C and a Java version, ICU4J are available. Multiple products that use ICU4C...

Multiple products that use International Components for Unicode (ICU) vulnerable to denial-of-service (DoS)

Overview Multiple products that use International Components for Unicode ICU contain a denial-of-service DoS vulnerability. International Components for Unicode ICU is a library for handling Unicode strings. A C version, ICU4C and a Java version ICU4J are available. Multiple products that use ICU...

DEBIAN-CVE-2013-2924

Use-after-free vulnerability in International Components for Unicode ICU, as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

Debian: Security Advisory (DSA-2397-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2397-1 : icu - buffer underflow

It was discovered that a buffer overflow in the Unicode library ICU could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2397. The text itself is...

DSA-2397-1 icu - buffer underflow

Bulletin has no description...

Debian: Security Advisory (DSA-1889-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1889-1 (icu)

The remote host is missing an update to icu announced via advisory DSA 1889-1. OpenVAS Vulnerability Test $Id: deb18891.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1889-1 icu Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

DEBIAN-CVE-2009-0153

International Components for Unicode ICU 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences...