PT-2017-14051 · Google+5 · Google Chrome+5

Yuan Deng · Published 2017-10-26 · Updated 2024-06-15 · CVE-2017-15396

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions International Components for Unicode (ICU) for C/C++ versions prior to 60.2 Google Chrome versions prior to 62.0.3202.75

Description A stack buffer overflow in the NumberingSystem component allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This issue affects various products, including Google Chrome, Opera, and others.

Recommendations For International Components for Unicode (ICU) for C/C++ versions prior to 60.2, update to version 60.2 or later. For Google Chrome versions prior to 62.0.3202.75, update to version 62.0.3202.75 or later.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2017-2600

CVE-2017-15396

DSA-4020-1

MGASA-2017-0423

OPENSUSE-SU-2017:3245-1

OPENSUSE-SU-2017_2902-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

RHSA-2017:3082

RHSA-2017_3082

Affected Products

Alt Linux

Google Chrome

Icu

Opera

Red Hat

Suse

References · 2415

• 🔥 https://github.com/tunz/js-vuln-db/blob/master/v8/CVE-2017-15401.md · Exploit
• 🔥 https://github.com/Bo0oM/CVE-2017-5124 · Exploit
• 🔥 https://bugs.chromium.org/p/chromium/issues/detail?id=770452 · Exploit
• 🔥 https://crbug.com/770452 · Exploit
• https://security-tracker.debian.org/tracker/source-package/chromium-browser · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15389 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5124 · Security Note
• https://security.gentoo.org/glsa/201711-02 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5133 · Security Note
• https://errata.altlinux.org/ALT-PU-2017-2600 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2017:3245-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4020-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15394 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5131 · Security Note