[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247621

 
 

909

 
 

194512

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-1511 libicu -- various

ID: oval:org.mitre.oval:def:8243Date: (C)2009-12-15   (M)2021-06-02
Class: PATCHFamily: unix




Several local vulnerabilities have been discovered in libicu, International Components for Unicode, The Common Vulnerabilities and Exposures project identifies the following problems: libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames. Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers to cause a denial of service (memory consumption) and possibly have unspecified other impact via a regular expression that writes a large amount of data to the backtracking stack.

Platform:
Debian 4.0
Product:
libicu
Reference:
DSA-1511
CVE-2007-4770
CVE-2007-4771
CVE    2
CVE-2007-4771
CVE-2007-4770
CPE    1
cpe:/o:debian:debian_linux:4.x

© SecPod Technologies