CVE-2017-14952

概要

参考情報

• bugs.icu-project.org/trac/changeset/40324/trunk/icu4c/source/i18n/zonemeta.cpp · Issue Tracking
• sourcebrella.com/blog/double-free-vulnerability-international-components-unicode-icu · Third Party Advisory
• oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

international components for unicode のその他の脆弱性

• CVE-2020-10531高 8.8An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based b…
• CVE-2018-18928緊急 9.8International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in …
• CVE-2017-15396中 6.5A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chro…
• CVE-2017-15422中 6.5Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google…
• CVE-2017-17484緊急 9.8The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx…