Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Un desbordamiento de enteros en el manejo de fechas internacionales en International Components for Unicode (ICU) for C/C++ en versiones anteriores a la 60.1, tal y como se emplea en V8 en Google Chrome en versiones anteriores a la 63.0.3239.84 y otros productos, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada.
AV:N/AC:M/Au:N/C:N/I:N/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | MEDIUM |
| Authentication | NONE |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-190
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| chrome | * | <built-in method update of dict object at 0x7fd36b89e480> | Application | |
| icu-project | international_components_for_unicode | * | <built-in method update of dict object at 0x7fd3840e6840> | Application |
| debian | debian_linux | 8.0 | <built-in method update of dict object at 0x7fd3840e7440> | Operating System |
| debian | debian_linux | 9.0 | <built-in method update of dict object at 0x7fd34b8da540> | Operating System |
| canonical | ubuntu_linux | 14.04 | <built-in method update of dict object at 0x7fd3840e75c0> | Operating System |
| canonical | ubuntu_linux | 16.04 | <built-in method update of dict object at 0x7fd3840e5340> | Operating System |
| canonical | ubuntu_linux | 17.10 | <built-in method update of dict object at 0x7fd3840e64c0> | Operating System |
| redhat | enterprise_linux_desktop | 6.0 | <built-in method update of dict object at 0x7fd39c40a200> | Operating System |
| redhat | enterprise_linux_server | 6.0 | <built-in method update of dict object at 0x7fd3840e69c0> | Operating System |
| redhat | enterprise_linux_workstation | 6.0 | <built-in method update of dict object at 0x7fd3840e6d00> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:c\/c\+\+:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* |