DeutschShown in its original language — a full translation is planned for a future version.
International Components for Unicode (ICU): Schwachstelle ermöglichen Ausführen von beliebigem Programmcode mit Benutzerrechten
view advisory published 2015-05-11
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in der Bibliothek ICU ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-8147US | high7.5 | Exploit | ||
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses a… | ||||
| CVE-2014-8146US | high7.5 | Exploit | ||
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does n… | ||||
02
references
External citations — patches, advisories, analysis.
- Debian Security Advisory DSA-3323 vom 2015-08-03external
- Ubuntu Security Notice USN-2605-1 vom 2015-05-11external
- WID-SEC-W-2024-3232 - CSAF Versionself
- WID-SEC-2024-3232 - Portal Versionself
- Debian Security Advisory DSA-3187-1 vom 2015-08-02external
- IBM Security Bulletin 7173426 vom 2024-10-18external
- SUSE Security Update SUSE-SU-2015:1915-1 vom 2015-11-05external
- SUSE Security Update SUSE-SU-2016:0324-1 vom 2016-02-04external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan