Skip to content
OpenAdvisories
Unscored USN-2522-1 10 CVEs

icu vulnerabilities

Published Mar 5, 2015 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that ICU incorrectly handled memory operations when
processing fonts. If an application using ICU processed crafted data, an
attacker could cause it to crash or potentially execute arbitrary code with
the privileges of the user invoking the program. This issue only affected
Ubuntu 12.04 LTS. (CVE-2013-1569, CVE-2013-2383, CVE-2013-2384,
CVE-2013-2419)

It was discovered that ICU incorrectly handled memory operations when
processing fonts. If an application using ICU processed crafted data, an
attacker could cause it to crash or potentially execute arbitrary code with
the privileges of the user invoking the program. (CVE-2014-6585,
CVE-2014-6591)

It was discovered that ICU incorrectly handled memory operations when
processing regular expressions. If an application using ICU processed
crafted data, an attacker could cause it to crash or potentially execute
arbitrary code with the privileges of the user invoking the program.
(CVE-2014-7923, CVE-2014-7926, CVE-2014-9654)

It was discovered that ICU collator implementation incorrectly handled
memory operations. If an application using ICU processed crafted data, an
attacker could cause it to crash or potentially execute arbitrary code with
the privileges of the user invoking the program. (CVE-2014-7940)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS icu 52.1-3ubuntu0.2

Vulnerabilities 10

  • Unscored —
    CVE-2013-1569

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 …

    icu Debian
  • Unscored —
    CVE-2013-2383

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 …

    icu Debian
  • Unscored —
    CVE-2013-2384

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 …

    icu Debian
  • Unscored —
    CVE-2013-2419 Public exploit EPSS 23%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 …

    icu Debian
  • Unscored —
    CVE-2014-6585

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidential…

    openjdk-7 openjdk-6 icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-6591

    Unspecified vulnerability in the Java SE component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attacke…

    openjdk-7 openjdk-6 icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-7923

    The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in…

    chromium-browser oxide-qt icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-7926

    The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in…

    chromium-browser oxide-qt icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-7940

    The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 2931…

    chromium-browser oxide-qt icu icu Debian Ubuntu
  • Unscored —
    CVE-2014-9654

    The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in G…

    icu icu Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2013-1569
  • report
    https://ubuntu.com/security/CVE-2013-2383
  • report
    https://ubuntu.com/security/CVE-2013-2384
  • report
    https://ubuntu.com/security/CVE-2013-2419
  • report
    https://ubuntu.com/security/CVE-2014-6585
  • report
    https://ubuntu.com/security/CVE-2014-6591
  • report
    https://ubuntu.com/security/CVE-2014-7923
  • report
    https://ubuntu.com/security/CVE-2014-7926
  • report
    https://ubuntu.com/security/CVE-2014-7940
  • report
    https://ubuntu.com/security/CVE-2014-9654