CVE-2011-4599 Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote attackers to execute arbitrary code via a crafted loc...
HighCVSS 7.5
EPSS 7.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote attackers to execute arbitrary code via a crafted locale ID that is not properly handled during variant canonicalization.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/icu(Debian:12) | < 4.8.1.1-3 | 4.8.1.1-3 |
| debian/icu(Debian:13) | < 4.8.1.1-3 | 4.8.1.1-3 |
| debian/icu(Debian:14) | < 4.8.1.1-3 | 4.8.1.1-3 |
| icu-project international components for unicode | < 49.1 | 49.1 |
References
- Debian Security Tracker CVE-2011-4599 vendor-advisory
- bugs.icu-project.org issue-tracking vendor-advisory
- code.google.com third-party-advisory
- APPLE-SA-2012-09-19-1 mailing-list third-party-advisory vendor-advisory
- APPLE-SA-2012-09-19-2 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2012:0100 third-party-advisory vendor-advisory
- RHSA-2011:1815 third-party-advisory vendor-advisory
- 47146 permissions-required third-party-advisory
- 47227 permissions-required third-party-advisory
- 47674 permissions-required third-party-advisory
- 47714 permissions-required third-party-advisory
- 47775 permissions-required third-party-advisory
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- USN-1348-1 third-party-advisory vendor-advisory
- DSA-2397 third-party-advisory vendor-advisory
- MDVSA-2011:194 third-party-advisory vendor-advisory
- [oss-security] 20111209 CVE Request: icu out of bounds access mailing-list
- [oss-security] 20111209 Re: CVE Request: icu out of bounds access mailing-list
- 77698 broken-link vdb-entry
- 51006 patch third-party-advisory vdb-entry
- icu-canonicalize-bo(71726) vdb-entry
- bugs.debian.org issue-tracking