CVE-2014-8147
Published: 31 December 2014
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
icu Launchpad, Ubuntu, Debian |
precise |
Not vulnerable
(code not present)
|
| trusty |
Released
(52.1-3ubuntu0.3)
|
|
| upstream |
Released
(55.1)
|
|
| utopic |
Released
(52.1-6ubuntu0.3)
|
|
| vivid |
Released
(52.1-8ubuntu0.1)
|
|
|
Patches: upstream: http://bugs.icu-project.org/trac/changeset/37080 |
||