Vulnerability Details CVE-2017-7868
International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_moveIndex32* function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://bugs.icu-project.org/trac/changeset/39671
- http://www.debian.org/security/2017/dsa-3830
- http://www.securityfocus.com/bid/97674
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437
- https://security.gentoo.org/glsa/201710-03
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- http://bugs.icu-project.org/trac/changeset/39671
- http://www.debian.org/security/2017/dsa-3830
- http://www.securityfocus.com/bid/97674
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437
- https://security.gentoo.org/glsa/201710-03
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
Products affected by CVE-2017-7868
-
cpe:2.3:a:icu-project:international_components_for_unicode:1.4
-
cpe:2.3:a:icu-project:international_components_for_unicode:1.4.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:1.4.1.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:1.4.1.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:1.4.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:1.5
-
cpe:2.3:a:icu-project:international_components_for_unicode:1.6
-
cpe:2.3:a:icu-project:international_components_for_unicode:1.7
-
cpe:2.3:a:icu-project:international_components_for_unicode:1.8
-
cpe:2.3:a:icu-project:international_components_for_unicode:1.8.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:2.0
-
cpe:2.3:a:icu-project:international_components_for_unicode:2.0.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:2.0.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:2.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:2.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:2.4
-
cpe:2.3:a:icu-project:international_components_for_unicode:2.6
-
cpe:2.3:a:icu-project:international_components_for_unicode:2.6.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:2.6.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:2.8
-
cpe:2.3:a:icu-project:international_components_for_unicode:3.0
-
cpe:2.3:a:icu-project:international_components_for_unicode:3.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:3.2.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:3.4
-
cpe:2.3:a:icu-project:international_components_for_unicode:3.4.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:3.6
-
cpe:2.3:a:icu-project:international_components_for_unicode:3.8
-
cpe:2.3:a:icu-project:international_components_for_unicode:3.8.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:4.0
-
cpe:2.3:a:icu-project:international_components_for_unicode:4.0.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:4.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:4.2.0.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:4.4.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:4.4.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:4.4.2.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:4.6
-
cpe:2.3:a:icu-project:international_components_for_unicode:4.6.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:4.8
-
cpe:2.3:a:icu-project:international_components_for_unicode:4.8.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:4.8.1.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:49.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:49.1.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:49.1.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:50.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:50.1.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:50.1.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:50.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:51.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:51.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:51.3
-
cpe:2.3:a:icu-project:international_components_for_unicode:52.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:52.1.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:52.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:53.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:53.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:54.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:54.1.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:54.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:55.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:55.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:56.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:56.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:57.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:57.2
-
cpe:2.3:a:icu-project:international_components_for_unicode:58.1
-
cpe:2.3:a:icu-project:international_components_for_unicode:58.2
-
cpe:2.3:o:debian:debian_linux:8.0