CVE-2017-7868

概要

参考情報

• bugs.icu-project.org/trac/changeset/39671 · Patch
• debian.org/security/2017/dsa-3830 · Third Party Advisory
• securityfocus.com/bid/97674 · Third Party Advisory
• bugs.chromium.org/p/oss-fuzz/issues/detail · Third Party Advisory
• security.gentoo.org/glsa/201710-03 · Third Party Advisory
• oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

international components for unicode のその他の脆弱性

• CVE-2020-10531高 8.8An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based b…
• CVE-2018-18928緊急 9.8International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in …
• CVE-2017-15396中 6.5A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chro…
• CVE-2017-15422中 6.5Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google…
• CVE-2017-17484緊急 9.8The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx…