6.5
CVSSv3

CVE-2017-15422

Published: 28/08/2018 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ prior to 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote malicious user to perform an out of bounds memory read via a crafted HTML page.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

icu-project international components for unicode

debian debian linux 8.0

debian debian linux 9.0

canonical ubuntu linux 16.04

canonical ubuntu linux 14.04

canonical ubuntu linux 17.10

redhat enterprise linux desktop 6.0

redhat enterprise linux server 6.0

redhat enterprise linux workstation 6.0

Vendor Advisories

Synopsis Critical: chromium-browser security update Type/Severity Security Advisory: Critical Topic An update for chromium-browser is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Critical A Common Vulnerability Scor ...
Debian Bug report logs - #892766 CVE-2017-15422 Package: src:icu; Maintainer for src:icu is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Mon, 12 Mar 2018 18:57:02 UTC Severity: grave Tags: fixed-upstream, security, upstream Found in versions icu/571-1, icu/571-8 ...
ICU could be made to crash if it received specially crafted input ...
It was discovered that an integer overflow in the International Components for Unicode (ICU) library could result in denial of service and potentially the execution of arbitrary code For the oldstable distribution (jessie), this problem has been fixed in version 521-8+deb8u7 For the stable distribution (stretch), this problem has been fixed in v ...
Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 601, as used in V8 in Google Chrome prior to 630323984 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page ...
An integer overflow has been found in the ICU component of the Chromium browser before 630323984 ...