ICU Project International Components for Unicode 58.2 Release Candidate for C/C++

CPE Details

ICU Project International Components for Unicode 58.2 Release Candidate for C/C++
icu-project
international_components_for_unicode
58.2
2020-04-06
16h54 +00:00
2020-04-06
16h54 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:icu-project:international_components_for_unicode:58.2:rc:*:*:*:c\/c\+\+:*:*

Informations

Vendor

icu-project

Product

international_components_for_unicode

Version

58.2

Update

rc

Target Software

c\/c\+\+

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-10531 2020-03-12 17h09 +00:00 An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
8.8
High
CVE-2017-15396 2018-08-28 18h00 +00:00 A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
6.5
Medium
CVE-2017-15422 2018-08-28 17h00 +00:00 Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
6.5
Medium
CVE-2017-17484 2017-12-10 19h00 +00:00 The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx calls for UTF-8 to UTF-8 conversion, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted string, as demonstrated by ZNC.
9.8
Critical
CVE-2017-14952 2017-10-16 14h00 +00:00 Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue.
9.8
Critical
CVE-2017-7867 2017-04-14 02h30 +00:00 International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_setNativeIndex* function.
7.5
High
CVE-2017-7868 2017-04-14 02h30 +00:00 International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_moveIndex32* function.
7.5
High