CVE-2008-1036

Synopsis Moderate: icu security update Type/Severity Security Advisory: Moderate Topic Updated icu packages that fix a security issue are now available for RedHat Enterprise Linux 5This update has been rated as having moderate security impact by the RedHat Security Response Team Description ...

Debian Bug report logs - #534590 does not properly handle invalid byte sequences during Unicode conversion Package: icu; Maintainer for icu is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Kees Cook <kees@debianorg> Date: Thu, 25 Jun 2009 15:42:01 UTC Severity: normal Tags: security Found in version 381 ...

It was discovered that libicu did not correctly handle certain invalid encoded data If a user or automated system were tricked into processing specially crafted data with applications linked against libicu, certain content filters could be bypassed ...

It was discovered that icu, the internal components for Unicode, did not properly sanitise invalid encoded data, which could lead to crosssite scripting attacks For the oldstable distribution (etch), this problem has been fixed in version 36-2etch2 For the stable distribution (lenny), this problem has been fixed in version 381-3+lenny1 For th ...