1417 matches found
CVE-2017-7868
International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextmoveIndex32 function...
CVE-2017-7867
International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextsetNativeIndex function...
CVE-2017-7867
International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextsetNativeIndex function...
CVE-2017-7868
CVE-2017-7868 affects ICU for C/C++ prior to 2017-02-13, featuring an out-of-bounds write caused by a heap-based buffer overflow in utf8TextAccess (common/utext.cpp) and utext_moveIndex32*. IBM bulletin confirms this as a vulnerability in ICU via a crafted uloc_getDisplayName call, enabling a rem...
CVE-2017-7867
International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextsetNativeIndex function...
CVE-2017-7867
CVE-2017-7867 is a heap-based buffer overflow in ICU for C/C++, caused by an out-of-bounds write in utf8TextAccess and utext_setNativeIndex*, leading to potential remote code execution or denial of service. The IBM bulletin (and related reports) confirm the flaw affects ICU prior to 2017-02-13 an...
CVE-2017-7868
International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextmoveIndex32 function...
UBUNTU-CVE-2017-7867
International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextsetNativeIndex function...
icu: Use-of-uninitialized-value in u_strToUTF8WithSub_59
Project: https://github.com/unicode-org/icu.git Detailed report: https://oss-fuzz.com/testcase?key=6488436909277184 Project: icu Fuzzer: libFuzzericuucasemapfuzzer Fuzz target binary: ucasemapfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...
USN-3227-1: ICU vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description It was discovered that ICU incorrectly handled certain memory operations when processing data. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash or...
Ubuntu 14.04 LTS / 16.04 LTS : ICU vulnerabilities (USN-3227-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3227-1 advisory. It was discovered that ICU incorrectly handled certain memory operations when processing data. If an application using ICU processed crafted...
Ubuntu: Security Advisory (USN-3227-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-3227-1: ICU vulnerabilities
It was discovered that ICU incorrectly handled certain memory operations when processing data. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program...
CVE-2016-7594
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ICU" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...
Memory corruption
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ICU" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...
GLSA-201701-58 : ICU: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201701-58 ICU: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ICU. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could cause a Denial of Service condition or...
SUSE SLES11 Security Update : icu (SUSE-SU-2017:0256-1)
This update for icu fixes the following security issues : - Passing a locale string longer than 255 characters to ulocgetDisplayName could have caused a buffer overflow resulting in denial of service or possible code execution bsc1012224, CVE-2014-9911. Note that Tenable Network Security has...
ICU: Multiple vulnerabilities
Background ICU is a mature, widely used set of C/C++ and Java libraries providing Unicode and Globalization support for software applications. Description Multiple vulnerabilities have been discovered in ICU. Please review the CVE identifiers referenced below for details. Impact Remote attackers...
SUSE-SU-2017:0256-1 Security update for icu
This update for icu fixes the following security issues: - Passing a locale string longer than 255 characters to ulocgetDisplayName could have caused a buffer overflow resulting in denial of service or possible code execution bsc1012224, CVE-2014-9911...
icu: Heap-buffer-overflow in utf8TextAccess
Project: https://github.com/unicode-org/icu.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4645398303997952 Project: icu Fuzzer: libFuzzericuucasemapfuzzer Fuzz target binary: ucasemapfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Heap-buffer-overflow...