CVE-2014-8146 The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track di...
HighCVSS 7.5
EPSS 24.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/icu(Debian:12) | < 52.1-9 | 52.1-9 |
| debian/icu(Debian:13) | < 52.1-9 | 52.1-9 |
| debian/icu(Debian:14) | < 52.1-9 | 52.1-9 |
| apple itunes | <= 12.1.3 | No fix listed |
| apple iphone os | <= 8.2 | No fix listed |
| apple mac os x | <= 10.10.4 | No fix listed |
| apple watchOS | <= 1.0.1 | No fix listed |
| icu-project international components for unicode | < 55.1 | 55.1 |
References
- Debian Security Tracker CVE-2014-8146 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.icu-project.org issue-tracking vendor-advisory
- APPLE-SA-2015-09-16-1 mailing-list vendor-advisory
- APPLE-SA-2015-09-16-3 mailing-list vendor-advisory
- APPLE-SA-2015-09-21-1 mailing-list vendor-advisory
- APPLE-SA-2015-09-30-3 mailing-list vendor-advisory
- [oss-security] 20150505 [CVE-2014-8146/8147] - ICU heap and integer overflows / I-C-U-FAIL mailing-list
- 20150505 [CVE-2014-8146/8147] - ICU heap and integer overflows / I-C-U-FAIL exploit mailing-list third-party-advisory
- DSA-3323 third-party-advisory vendor-advisory
- VU#602540 third-party-advisory us-government-resource
- www.oracle.com third-party-advisory
- www.oracle.com patch
- 74457 third-party-advisory vdb-entry
- raw.githubusercontent.com exploit
- GLSA-201507-04 third-party-advisory vendor-advisory
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- support.apple.com third-party-advisory
- www.oracle.com