Notifications for a CVE
Stay informed of any changes for a specific CVE.
CVE Descriptions
libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames.
CVE Informations
Related Weaknesses
| Weakness Name | Source | |
|---|---|---|
| Category : Resource Management Errors Weaknesses in this category are related to improper management of system resources. |
Metrics
| Metrics | Score | Severity | CVSS Vector | Source |
|---|---|---|---|---|
| V2 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P | [email protected] |
EPSS
EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.
EPSS Score
The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.
EPSS Percentile
The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
Products Mentioned
Configuraton 0
Icu-project>>International_components_for_unicode >> Version To (including) 3.8.1
- Icu-project>>International_components_for_unicode >> Version 1.4 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 1.4.1 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 1.4.1.1 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 1.4.1.2 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 1.4.2 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 1.5 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 1.6 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 1.7 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 1.8 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 1.8.1 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 2.0 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 2.0.1 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 2.0.2 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 2.1 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 2.2 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 2.4 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 2.6 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 2.6.1 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 2.6.2 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 2.8 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 3.0 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 3.2 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 3.2.1 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 3.4 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 3.4.1 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 3.6 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 3.8 (Open CPE detail)
- Icu-project>>International_components_for_unicode >> Version 3.8.1 (Open CPE detail)
References
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11172
Tags : vdb-entry, signature, x_refsource_OVAL
Tags : vdb-entry, signature, x_refsource_OVAL
http://sunsolve.sun.com/search/document.do?assetkey=1-26-233922-1
Tags : vendor-advisory, x_refsource_SUNALERT
Tags : vendor-advisory, x_refsource_SUNALERT
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5507
Tags : vdb-entry, signature, x_refsource_OVAL
Tags : vdb-entry, signature, x_refsource_OVAL
http://www.novell.com/linux/security/advisories/2008_23_openoffice.html
Tags : vendor-advisory, x_refsource_SUSE
Tags : vendor-advisory, x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE
Tags : vendor-advisory, x_refsource_SUSE
http://www.mandriva.com/security/advisories?name=MDVSA-2008:026
Tags : vendor-advisory, x_refsource_MANDRIVA
Tags : vendor-advisory, x_refsource_MANDRIVA
http://sunsolve.sun.com/search/document.do?assetkey=1-26-231641-1
Tags : vendor-advisory, x_refsource_SUNALERT
Tags : vendor-advisory, x_refsource_SUNALERT
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00921.html
Tags : vendor-advisory, x_refsource_FEDORA
Tags : vendor-advisory, x_refsource_FEDORA
http://www.securityfocus.com/archive/1/487677/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ
Tags : mailing-list, x_refsource_BUGTRAQ
http://sourceforge.net/mailarchive/message.php?msg_name=d03a2ffb0801221538x68825e42xb4a4aaf0fcccecbd%40mail.gmail.com
Tags : mailing-list, x_refsource_MLIST
Tags : mailing-list, x_refsource_MLIST
https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00896.html
Tags : vendor-advisory, x_refsource_FEDORA
Tags : vendor-advisory, x_refsource_FEDORA
2025©
tesweb SA
