Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-4771
HistoryJan 29, 2008 - 12:00 a.m.

CVE-2007-4771

2008-01-2900:00:00
ubuntu.com
ubuntu.com
14

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

79.9%

Heap-based buffer overflow in the doInterval function in regexcmp.cpp in
libicu in International Components for Unicode (ICU) 3.8.1 and earlier
allows context-dependent attackers to cause a denial of service (memory
consumption) and possibly have unspecified other impact via a regular
expression that writes a large amount of data to the backtracking stack.
NOTE: some of these details are obtained from third party information.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchicu< 3.4.1a-1ubuntu1.6.06.1UNKNOWN
ubuntu6.10noarchicu< 3.4.1a-1ubuntu1.6.10.1UNKNOWN
ubuntu7.04noarchicu< 3.6-2ubuntu0.1UNKNOWN
ubuntu7.10noarchicu< 3.6-3ubuntu0.1UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

79.9%