Summary
It was discovered that ICU incorrectly handled certain memory operations
when processing data. If an application using ICU processed crafted data,
a remote attacker could possibly cause it to crash or potentially execute
arbitrary code with the privileges of the user invoking the program.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | icu | 52.1-3ubuntu0.5 |
| Ubuntu · 16.04 LTS 16.04:LTS | icu | 55.1-7ubuntu0.1 |
Vulnerabilities 5
-
Unscored —
Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Component…
-
Unscored —
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…
-
Unscored —
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Ja…
-
Unscored —
The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 …
-
Unscored —
Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) throu…