1. CVE-Search
  2. CVE-2017-7868
ID CVE-2017-7868
Summary International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_moveIndex32* function.
References
Vulnerable Configurations
  • cpe:2.3:a:icu-project:international_components_for_unicode:1.4:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:1.4:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:1.4.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:1.4.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:1.4.1.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:1.4.1.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:1.4.1.2:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:1.4.1.2:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:1.4.2:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:1.4.2:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:1.5:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:1.5:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:1.6:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:1.6:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:1.7:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:1.7:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:1.8:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:1.8:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:1.8.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:1.8.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:2.0:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:2.0:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:2.0.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:2.0.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:2.0.2:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:2.0.2:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:2.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:2.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:2.2:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:2.2:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:2.4:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:2.4:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:2.6:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:2.6:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:2.6.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:2.6.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:2.6.2:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:2.6.2:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:2.8:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:2.8:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:3.0:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:3.0:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:3.2:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:3.2:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:3.2.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:3.2.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:3.4:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:3.4:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:3.4.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:3.4.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:3.6:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:3.6:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:3.8:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:3.8:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:3.8.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:3.8.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:4.0:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:4.0:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:4.0.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:4.0.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:4.2:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:4.2:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:4.2.0.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:4.2.0.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:4.4.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:4.4.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:4.4.2:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:4.4.2:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:4.4.2.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:4.4.2.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:4.6:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:4.6:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:4.6.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:4.6.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:4.8:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:4.8:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:4.8.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:4.8.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:4.8.1.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:4.8.1.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:49.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:49.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:49.1.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:49.1.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:49.1.2:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:49.1.2:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:50.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:50.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:50.1.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:50.1.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:50.1.2:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:50.1.2:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:50.1.2:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:50.1.2:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:50.2:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:50.2:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:51.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:51.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:51.2:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:51.2:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:51.2:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:51.2:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:51.3:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:51.3:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:52.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:52.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:52.1:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:52.1:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:52.1.1:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:52.1.1:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:52.2:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:52.2:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:53.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:53.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:53.1:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:53.1:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:53.2:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:53.2:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:54.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:54.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:54.1:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:54.1:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:54.1.1:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:54.1.1:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:54.2:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:54.2:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:55.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:55.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:55.1:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:55.1:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:55.2:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:55.2:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:56.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:56.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:56.1:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:56.1:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:56.2:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:56.2:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:57.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:57.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:57.1:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:57.1:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:57.2:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:57.2:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:58.1:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:58.1:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:58.1:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:58.1:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:58.2:*:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:58.2:*:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:a:icu-project:international_components_for_unicode:58.2:rc:*:*:*:c\/c\+\+:*:*
    cpe:2.3:a:icu-project:international_components_for_unicode:58.2:rc:*:*:*:c\/c\+\+:*:*
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 23-04-2019 - 19:31)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 97674
debian DSA-3830
gentoo GLSA-201710-03
misc
Last major update 23-04-2019 - 19:31
Published 14-04-2017 - 04:59
Last modified 23-04-2019 - 19:31
Back to Top