NVD

Id
10986  
Name
CVE-2011-4599  
Description
Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote attackers to execute arbitrary code via a crafted locale ID that is not properly handled during variant canonicalization.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-06-21  
Modified Date
2012-09-21  
Seq
2011-4599  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61289 10986 CVE-2011-4599 http://bugs.icu-project.org/trac/ticket/8984  View
61290 10986 CVE-2011-4599 http://code.google.com/p/chromium/issues/detail?id=106441  View
61291 10986 CVE-2011-4599 APPLE-SA-2012-09-19-1  View
61292 10986 CVE-2011-4599 APPLE-SA-2012-09-19-2  View
61293 10986 CVE-2011-4599 openSUSE-SU-2012:0100  View
61294 10986 CVE-2011-4599 RHSA-2011:1815  View
61295 10986 CVE-2011-4599 http://support.apple.com/kb/HT5501  View
61296 10986 CVE-2011-4599 http://support.apple.com/kb/HT5503  View
61297 10986 CVE-2011-4599 USN-1348-1  View
61298 10986 CVE-2011-4599 DSA-2397  View
61299 10986 CVE-2011-4599 MDVSA-2011:194  View
61300 10986 CVE-2011-4599 [oss-security] 20111209 CVE Request: icu out of bounds access  View
61301 10986 CVE-2011-4599 [oss-security] 20111209 Re: CVE Request: icu out of bounds access  View
61302 10986 CVE-2011-4599 51006  View
61303 10986 CVE-2011-4599 icu-canonicalize-bo(71726)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27135 JVNDB-2012-002842 ICU の common/uloc.c 内の _canonicalize 関数におけるスタックベースのバッファオーバーフローの脆弱性 International Components for Unicode (ICU) の common/uloc.c 内の _canonicalize 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2011-4599 52506 CVE-2011-4599 10986 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002842.html 2012-06-21 2013-01-31 View