Published: 25/07/2016 Updated: 07/11/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) up to and including 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote malicious users to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long httpAcceptLanguage argument.

Vulnerable Product	Search on Vulmon	Subscribe to Product
icu-project international components for unicode

Debian Bug report logs - #838694 icu: CVE-2016-7415: Stack based buffer overflow in locidcpp Package: src:icu; Maintainer for src:icu is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 23 Sep 2016 17:27:01 UTC Severity: important Tags: security, upstream F ...

Several security issues were fixed in ICU ...

Several vulnerabilities were discovered in the International Components for Unicode (ICU) library CVE-2014-9911 Michele Spagnuolo discovered a buffer overflow vulnerability which might allow remote attackers to cause a denial of service or possibly execute arbitrary code via crafted text CVE-2015-2632 An integer overflow vulnerab ...

The uloc_acceptLanguageFromHTTP function in common/uloccpp in International Components for Unicode (ICU) through 571 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call ...

CWE-119 http://openwall.com/lists/oss-security/2016/07/24/2 https://bugs.php.net/72533 http://www.securityfocus.com/bid/92127 https://security.gentoo.org/glsa/201701-58 https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=aa82e99ed8003c01f1ef4f0940e56b85c5b032d4 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=838694 https://usn.ubuntu.com/3227-1/

CVE-2016-6293

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect