CVE-2017-15396 A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remot...
MediumCVSS 6.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | < 62.0.3202.75 | 62.0.3202.75 |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| debian linux | = 10.0 | No fix listed |
| icu-project international components for unicode | < 60.2 | 60.2 |
References
- bugs.icu-project.org
- 101597 vdb-entry
- RHSA-2017:3082 vendor-advisory
- chromereleases.googleblog.com
- crbug.com
- GLSA-201711-02 vendor-advisory
- DSA-4020 vendor-advisory