PT-2015-3265 · Icu+5 · International Components For Unicode+5

Published 2015-01-21 · Updated 2024-06-15 · CVE-2014-7923

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions International Components for Unicode (ICU) versions prior to 52 SVN revision 292944 Google Chrome versions prior to 40.0.2214.91

Description The issue is related to errors in the code of the Regular Expressions package. It can be exploited by remote attackers to cause a denial of service or possibly have other impacts, such as memory corruption, via vectors related to a look-behind expression or a zero-length quantifier.

Recommendations For International Components for Unicode (ICU) versions prior to 52 SVN revision 292944, update to a version after SVN revision 292944. For Google Chrome versions prior to 40.0.2214.91, update to version 40.0.2214.91 or later.

Exploit

Fix

DoS

Weakness Enumeration

CWE-17

Related Identifiers

ALT-PU-2015-1098

BDU:2016-01657

CVE-2014-7923

DLA-219-1

DSA-3187-1

MGASA-2015-0047

OPENSUSE-SU-2015_0441-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

RHSA-2015:0093

RHSA-2015_0093

USN-2476-1

USN-2522-1

Affected Products

Alt Linux

Google Chrome

International Components For Unicode

Red Hat

Suse

Ubuntu

References · 2524

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2014-7927.md · Exploit
• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2014-7928.md · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7929 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7934 · Security Note
• https://ubuntu.com/security/CVE-2014-7924 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7946 · Security Note
• https://bdu.fstec.ru/vul/2015-09975 · Security Note
• https://ubuntu.com/security/CVE-2014-7926 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2522-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0047.html · Security Note
• https://errata.altlinux.org/ALT-PU-2015-1098 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7943 · Security Note
• https://ubuntu.com/security/CVE-2014-7928 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-7925 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6585 · Security Note