CVE-2017-14952 in Utilities Framework

Summary

Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

09/29/2017

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
133756	Oracle Utilities Framework icu4j double free	415	Not defined	Official fix	CVE-2017-14952
107906	International Components for Unicode zonemeta.cpp up double free	415	Not defined	Official fix	CVE-2017-14952

Sources

• MITRE
• NVD
• CVE Details