CVE-2017-7868

CVE-2017-7868 affects ICU for C/C++ prior to 2017-02-13, featuring an out-of-bounds write caused by a heap-based buffer overflow in utf8TextAccess (common/utext.cpp) and utext_moveIndex32*. IBM bulletin confirms this as a vulnerability in ICU via a crafted uloc_getDisplayName call, enabling a rem...

CVE-2017-7868

International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextmoveIndex32 function...

CVE-2017-7868

International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextmoveIndex32 function...

UBUNTU-CVE-2017-7868

International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextmoveIndex32 function...

CVE-2017-7867

International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextsetNativeIndex function...

DEBIAN-CVE-2016-4483

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service out-of-bounds read and application crash via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627...

icu: Use-of-uninitialized-value in u_strToUTF8WithSub_59

Project: https://github.com/unicode-org/icu.git Detailed report: https://oss-fuzz.com/testcase?key=6488436909277184 Project: icu Fuzzer: libFuzzericuucasemapfuzzer Fuzz target binary: ucasemapfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

[SECURITY] Fedora 24 Update: qbittorrent-3.3.11-2.fc24

A Bittorrent client using rblibtorrent and a Qt4 Graphical User Interface. It aims to be as fast as possible and to provide multi-OS, unicode support...

Sync Breeze v9.5.16 - Buffer Overflow Vulnerabilities

Document Title: =============== Sync Breeze v9.5.16 - Buffer Overflow Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2045 Video: https://www.vulnerability-lab.com/getcontent.php?id=2049 Release Date: ============= 2017-03-28 Vulnerabili...

ALPINE-CVE-2017-7186

libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violation for read access, and application crash by triggering an invalid Unicode property lookup...

CVE-2017-7186

libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violation for read access, and application crash by triggering an invalid Unicode property lookup...

UBUNTU-CVE-2017-7186

libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violation for read access, and application crash by triggering an invalid Unicode property lookup...

CVE-2017-7186

libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violation for read access, and application crash by triggering an invalid Unicode property lookup...

DEBIAN-CVE-2017-7186

libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violation for read access, and application crash by triggering an invalid Unicode property lookup...

CVE-2017-7186

libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violation for read access, and application crash by triggering an invalid Unicode property lookup...

Design/Logic Flaw

libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violation for read access, and application crash by triggering an invalid Unicode property lookup...

CVE-2017-7186

libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service segmentation violation for read access, and application crash by triggering an invalid Unicode property lookup...

PT-2017-17565 · Pcre +3 · Pcre2 +4

Name of the Vulnerable Software and Affected Versions: PCRE versions 8.40 PCRE2 versions 10.23 Description: The issue allows remote attackers to cause a denial of service, resulting in a segmentation violation for read access and an application crash, by triggering an invalid Unicode property...

CVE-2017-7186

CVE-2017-7186 affects libpcre1 (PCRE 8.40) and libpcre2 (PCRE2 10.23); it allows remote DoS via an invalid Unicode property lookup, potentially causing segmentation faults or crashes. Related issues (CVE-2017-7244, CVE-2017-7245, CVE-2017-7246) affect PCRE/pcretest in PCRE/PCRE2 with stack-based ...

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03757)

Microsoft Uniscribe is a component of the Windows operating system developed by Microsoft Corporation for the correct presentation of Unicode characters. An information disclosure vulnerability exists in Microsoft Uniscribe's handling of in-memory objects, which allows remote attackers to exploit...