unicode project unicode vulnerabilities and exploits

(subscribe to this query)

8.1

CVSSv3

unicode loads unicode data downloaded from unicode.org into nodejs. Unicode prior to 9.0.0 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks.

Unicode Project Unicode

9.8

CVSSv3

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set.

Rxvt-unicode Project Rxvt-unicode 9.25 Rxvt-unicode Project Rxvt-unicode 9.26 Fedoraproject Extra Packages For Enterprise Linux 8.0 Fedoraproject Fedora 37

9.8

CVSSv3

Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ up to and including 59.1 allows remote malicious users to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue.

Icu-project International Components For Unicode

9.8

CVSSv3

The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ up to and including 60.1 mishandles ucnv_convertEx calls for UTF-8 to UTF-8 conversion, which allows remote malicious users to cause a denial of service (stack-based buffer overf...

Icu-project International Components For Unicode

NA

Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) prior to 49.1 allows remote malicious users to execute arbitrary code via a crafted locale ID that is not properly handled during variant canonicalization.

Icu-project International Components For Unicode

NA

libicu in International Components for Unicode (ICU) 3.8.1 and previous versions attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent malicious users to read from, or write to, out-of-bounds memory locations, relat...

Icu-project International Components For Unicode

NA

Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and previous versions allows context-dependent malicious users to cause a denial of service (memory consumption) and possibly have unspecified other...

Icu-project International Components For Unicode

9.8

CVSSv3

International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.

Icu-project International Components For Unicode 63.1

8.8

CVSSv3

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline.

Eterm Project Eterm 0.9.7 Mrxvt Project Mrxvt 0.5.4 Rxvt Project Rxvt 2.7.10 Rxvt-unicode Project Rxvt-unicode 9.22 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Debian Debian Linux 9.0

9.8

CVSSv3

The Regular Expressions package in International Components for Unicode (ICU) for C/C++ prior to 2014-12-03, as used in Google Chrome prior to 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote malicious us...

Google Chrome Icu-project International Components For Unicode

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook