CVE-2007-4770 in International Components for Unicodeinfo

Summary

libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

09/10/2007

Disclosure

01/28/2008

Entries

1

CPE

ready

CVSS

7.3

EPSS

0.03670

CTI

0.00

Sources

Do you need the next level of professionalism?

Upgrade your account now!