Записи icu-project
21 опубликованных записей вендора icu-project.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 4
- С записью об исправлении
- 95,2 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer8
- CWE-190 Integer Overflow or Wraparound3
- CWE-399 Resource Management Errors3
- CWE-17 DEPRECATED: Code2
- CWE-787 Out-of-bounds Write2
- CWE-415 Double Free1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
21 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
41В плане | CVE-2016-7415Эксплойта нет | Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allicu-project · international components for unicode · CWE-119 | Критическая9,8 | — | 5,7 % | 17 сент. 2016 г. |
41В плане | CVE-2014-9911Эксплойта нет | Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU) bicu-project · international components for unicode · CWE-119 | Критическая9,8 | — | 5,5 % | 4 янв. 2017 г. |
41В плане | CVE-2017-14952Эксплойта нет | Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbicu-project · international components for unicode · CWE-415 | Критическая9,8 | — | 5,0 % | 16 окт. 2017 г. |
41В плане | CVE-2016-6293Эксплойта нет | The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not enicu-project · international components for unicode · CWE-119 | Критическая9,8 | — | 5,0 % | 25 июл. 2016 г. |
41В плане | CVE-2015-5922Эксплойта нет | Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS beforeapple · mac os x | Критическая10,0 | — | 2,9 % | 9 окт. 2015 г. |
40В плане | CVE-2017-17484Эксплойта нет | The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertExicu-project · international components for unicode · CWE-119 | Критическая9,8 | — | 4,4 % | 10 дек. 2017 г. |
40В плане | CVE-2018-18928Эксплойта нет | International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in icu-project · international components for unicode · CWE-190 | Критическая9,8 | — | 2,9 % | 4 нояб. 2018 г. |
40В плане | CVE-2014-9654Эксплойта нет | The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 4google · chrome · CWE-119 | Критическая9,8 | — | 2,4 % | 24 апр. 2017 г. |
38Наблюдать | CVE-2007-4771Эксплойта нет | Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlicu-project · international components for unicode · CWE-399 | Критическая9,3 | — | 2,5 % | 28 янв. 2008 г. |
37Наблюдать | CVE-2014-8146Proof of concept | The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Componeapple · itunes · CWE-119 | Высокая7,5 | — | 24,7 % | 25 мая 2015 г. |
37Наблюдать | CVE-2014-8147Proof of concept | The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Componeapple · mac os x · CWE-189 | Высокая7,5 | — | 23,6 % | 25 мая 2015 г. |
36Наблюдать | CVE-2020-10531Эксплойта нет | An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.icu-project · international components for unicode · CWE-190 | Высокая8,8 | — | 2,6 % | 12 мар. 2020 г. |
32Наблюдать | CVE-2011-4599Эксплойта нет | Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows icu-project · international components for unicode · CWE-119 | Высокая7,5 | — | 7,9 % | 21 июн. 2012 г. |
31Наблюдать | CVE-2017-7867Эксплойта нет | International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow relicu-project · international components for unicode · CWE-787 | Высокая7,5 | — | 4,6 % | 14 апр. 2017 г. |
31Наблюдать | CVE-2017-7868Эксплойта нет | International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow relicu-project · international components for unicode · CWE-787 | Высокая7,5 | — | 4,4 % | 14 апр. 2017 г. |
31Наблюдать | CVE-2014-7926Эксплойта нет | The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome beforegoogle · chrome · CWE-17 | Высокая7,5 | — | 2,2 % | 22 янв. 2015 г. |
31Наблюдать | CVE-2014-7923Эксплойта нет | The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome beforegoogle · chrome · CWE-17 | Высокая7,5 | — | 2,2 % | 22 янв. 2015 г. |
31Наблюдать | CVE-2014-7940Эксплойта нет | The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Googlegoogle · chrome · CWE-399 | Высокая7,5 | — | 2,0 % | 22 янв. 2015 г. |
28Наблюдать | CVE-2007-4770Эксплойта нет | libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zicu-project · international components for unicode · CWE-399 | Средняя6,8 | — | 2,9 % | 28 янв. 2008 г. |
27Наблюдать | CVE-2017-15422Эксплойта нет | Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Googlegoogle · chrome · CWE-190 | Средняя6,5 | — | 2,5 % | 28 авг. 2018 г. |
27Наблюдать | CVE-2017-15396Эксплойта нет | A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrogoogle · chrome · CWE-119 | Средняя6,5 | — | 2,2 % | 28 авг. 2018 г. |
- CVE-2016-741541В плане
Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ all
КритическаяCVSS 9,8Эксплойта нетEPSS 5 %icu-project · international components for unicode17 сент. 2016 г.
- CVE-2014-991141В плане
Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU) b
КритическаяCVSS 9,8Эксплойта нетEPSS 5 %icu-project · international components for unicode4 янв. 2017 г.
- CVE-2017-1495241В плане
Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arb
КритическаяCVSS 9,8Эксплойта нетEPSS 5 %icu-project · international components for unicode16 окт. 2017 г.
- CVE-2016-629341В плане
The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not en
КритическаяCVSS 9,8Эксплойта нетEPSS 5 %icu-project · international components for unicode25 июл. 2016 г.
- CVE-2015-592241В плане
Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS before
КритическаяCVSS 10,0Эксплойта нетEPSS 2 %apple · mac os x9 окт. 2015 г.
- CVE-2017-1748440В плане
The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %icu-project · international components for unicode10 дек. 2017 г.
- CVE-2018-1892840В плане
International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %icu-project · international components for unicode4 нояб. 2018 г.
- CVE-2014-965440В плане
The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 4
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %google · chrome24 апр. 2017 г.
- CVE-2007-477138Наблюдать
Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earl
КритическаяCVSS 9,3Эксплойта нетEPSS 2 %icu-project · international components for unicode28 янв. 2008 г.
- CVE-2014-814637Наблюдать
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Compone
ВысокаяCVSS 7,5Proof of conceptEPSS 24 %apple · itunes25 мая 2015 г.
- CVE-2014-814737Наблюдать
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Compone
ВысокаяCVSS 7,5Proof of conceptEPSS 23 %apple · mac os x25 мая 2015 г.
- CVE-2020-1053136Наблюдать
An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %icu-project · international components for unicode12 мар. 2020 г.
- CVE-2011-459932Наблюдать
Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows
ВысокаяCVSS 7,5Эксплойта нетEPSS 7 %icu-project · international components for unicode21 июн. 2012 г.
- CVE-2017-786731Наблюдать
International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow rel
ВысокаяCVSS 7,5Эксплойта нетEPSS 4 %icu-project · international components for unicode14 апр. 2017 г.
- CVE-2017-786831Наблюдать
International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow rel
ВысокаяCVSS 7,5Эксплойта нетEPSS 4 %icu-project · international components for unicode14 апр. 2017 г.
- CVE-2014-792631Наблюдать
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %google · chrome22 янв. 2015 г.
- CVE-2014-792331Наблюдать
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %google · chrome22 янв. 2015 г.
- CVE-2014-794031Наблюдать
The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %google · chrome22 янв. 2015 г.
- CVE-2007-477028Наблюдать
libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group z
СредняяCVSS 6,8Эксплойта нетEPSS 2 %icu-project · international components for unicode28 янв. 2008 г.
- CVE-2017-1542227Наблюдать
Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google
СредняяCVSS 6,5Эксплойта нетEPSS 2 %google · chrome28 авг. 2018 г.
- CVE-2017-1539627Наблюдать
A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chro
СредняяCVSS 6,5Эксплойта нетEPSS 2 %google · chrome28 авг. 2018 г.