PT-2015-3265 · Icu+5 · International Components For Unicode+5

Publicado

2015-01-21

·

Atualizado

2024-06-15

·

CVE-2014-7923

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions International Components for Unicode (ICU) versions prior to 52 SVN revision 292944 Google Chrome versions prior to 40.0.2214.91
Description The issue is related to errors in the code of the Regular Expressions package. It can be exploited by remote attackers to cause a denial of service or possibly have other impacts, such as memory corruption, via vectors related to a look-behind expression or a zero-length quantifier.
Recommendations For International Components for Unicode (ICU) versions prior to 52 SVN revision 292944, update to a version after SVN revision 292944. For Google Chrome versions prior to 40.0.2214.91, update to version 40.0.2214.91 or later.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-17

Identificadores relacionados

ALT-PU-2015-1098
BDU:2016-01657
CVE-2014-7923
DLA-219-1
DSA-3187-1
MGASA-2015-0047
OPENSUSE-SU-2015_0441-1
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
RHSA-2015:0093
RHSA-2015_0093
USN-2476-1
USN-2522-1

Produtos afetados

Alt Linux
Google Chrome
International Components For Unicode
Red Hat
Suse
Ubuntu