2015-05-26 00:59:01 2019-04-23 21:29:21

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Icu-project International components for unicode 51.2 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 50.1.2 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 51.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 50.1.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 50.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 49.1.2 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 49.1.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 49.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 4.8.1.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 4.8.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 4.8 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 4.6.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 4.6 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 4.4.2.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 4.4.2 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 4.4.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 4.2.0.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 4.2 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 4.0.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 4.0 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 3.8.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 3.8 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 3.6 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 3.4.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 3.4 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 3.2.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 3.2 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 3.0 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 2.8 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 2.6.2 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 2.6.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 2.6 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 2.4 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 2.2 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 2.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 2.0.2 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 2.0.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 2.0 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 1.8.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 1.8 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 1.7 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 1.6 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 1.5 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 1.4.2 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 1.4.1.2 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 1.4.1.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 1.4.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 1.4 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 52.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 53.1 ~~~c/c++~~ (not an official CPE) Icu-project International components for unicode 54.1 ~~~c/c++~~ (not an official CPE)