CVE-2014-8146

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service...

chromium-browser: Uninitialized value in Blink.

platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text...

Google Chrome Blink Code Injection Vulnerability

Blink is a browser typography engine developed by Google and Opera Software. A security vulnerability exists in the platform/fonts/shaping/HarfBuzzShaper.cpp file in Google Chrome Blink. due to the program failing to initialize the width field. A remote attacker could exploit this vulnerability t...

Code injection

platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text...

CVE-2015-1262

CVE-2015-1262 affects Blink (HarfBuzzShaper.cpp) in Google Chrome before 43.0.2357.65, where a width field is not initialized. This can lead to a denial of service or potentially other impact via crafted Unicode text. Affected software is Chrome (Blink) prior to the fixed build; remediation is to...

CVE-2015-1262

Removed by vendor...

IIS the new UNICODE vulnerability WideChar and MultiByte character conversion issues-vulnerability warning-the black bar safety net

0 2 year summary has not been published a little windows features! These characteristics of is my summary of the security model of“vulnerability”, as long as we go in search of such an environment or wait for such an environment. The following characteristics for early IIS has not found the...

CVE-2015-1262

platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text...

UBUNTU-CVE-2015-1262

platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text...

[SECURITY] [DLA 219-1] icu security update

Package : icu Version : 4.4.1-8+squeeze3 CVE ID : CVE-2013-1569 CVE-2013-2383 CVE-2013-2384 CVE-2013-2419 CVE-2014-6585 CVE-2014-6591 CVE-2014-7923 CVE-2014-7926 CVE-2014-7940 CVE-2014-9654 Several vulnerabilities were discovered in the International Components for Unicode ICU library:...

DLA-219-1 icu - security update

Bulletin has no description...

ICU: layout engine glyphStorage off-by-one (OpenJDK 2D, 8067699)

An off-by-one flaw, leading to a buffer overflow, was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox...

USN-2605-1 icu vulnerabilities

Pedro Ribeiro discovered that ICU incorrectly handled certain memory operations when processing data. If an application using ICU processed crafted data, an attacker could cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program...

International Components for Unicode Heap Buffer Overflow Vulnerability

International Components for Unicode is a mature and widely used set of libraries and tools for Unicode support, software internationalization and software globalization. A heap buffer overflow vulnerability exists in versions prior to ICU 55.1, which stems from an error in the...

International Components for Unicode Integer Overflow Vulnerability

International Components for Unicode is a mature and widely used set of libraries and tools for Unicode support, software internationalization and software globalization. An integer overflow vulnerability exists in ICU versions prior to 55.1 that stems from an error in the '"resolveImplicitLevels...

HackerOne: Homograph Attack

Hello HackerOne, Fix of Report 29491 and 58612 is incomplete. I found another way to to replicate homograph attack using Hex Code: www.%00ebаy.com www.%01ebаy.com www.%02ebаy.com www.%03ebаy.com www.%04ebаy.com www.%05ebаy.com www.%06ebаy.com www.%07ebаy.com www.%08ebаy.com www.%0Bebаy.com...

Internet Bug Bounty: Multiple type confusions in unicode error handlers

https://bugs.python.org/issue24102...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The numerous vulnerabilities of the rxvt-unicode package on the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the icu package up to version 49.1.1-r1 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the library for working with Unicode International Components for Unicode, related to a resource management mechanism error, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Unicode International Components for Unicode library is related to a resource management mechanism error. Exploiting this vulnerability allows an attacker to remotely access confidential data, compromise its integrity, and cause service failures...