Home

CVE-2017-7867

Description

International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_setNativeIndex* function.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.613

Associated Vulnerability

VulnerabilityOS Platform
International Components for Unicode library (USN-3227-1) libicu52_52.1-3ubuntu0.6_i386.debLinux
International Components for Unicode library (USN-3227-1) libicu52_52.1-3ubuntu0.6_amd64.debLinux
International Components for Unicode library (USN-3227-1) libicu55_55.1-7ubuntu0.2_i386.debLinux
International Components for Unicode library (USN-3227-1) libicu55_55.1-7ubuntu0.2_amd64.debLinux
International Components for Unicode library (USN-3227-1) libicu57_57.1-4ubuntu0.2_i386.debLinux
International Components for Unicode library (USN-3227-1) libicu57_57.1-4ubuntu0.2_amd64.debLinux
International Components for Unicode library (USN-3274-1) libicu57_57.1-4ubuntu0.2_i386.debLinux
International Components for Unicode library (USN-3274-1) libicu57_57.1-4ubuntu0.2_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234