Summary
It was discovered that ICU incorrectly handled certain inputs. If an
application using ICU processed crafted data, a remote attacker could
possibly cause it to crash or potentially execute arbitrary code with
the privileges of the user invoking the program.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | icu | 52.1-3ubuntu0.7 |
| Ubuntu · 16.04 LTS 16.04:LTS | icu | 55.1-7ubuntu0.3 |
Vulnerabilities 1
-
Unscored —
Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote att…
References
-
report
https://ubuntu.com/security/CVE-2017-14952