NVD

Id
56886  
Name
CVE-2007-4770  
Description
libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka ), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2008-01-28  
Modified Date
2011-03-07  
Seq
2007-4770  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
290268 56886 CVE-2007-4770 SUSE-SR:2008:005  View
290269 56886 CVE-2007-4770 oval:org.mitre.oval:def:11172  View
290270 56886 CVE-2007-4770 oval:org.mitre.oval:def:5507  View
290271 56886 CVE-2007-4770 RHSA-2008:0090  View
290272 56886 CVE-2007-4770 GLSA-200803-20  View
290273 56886 CVE-2007-4770 GLSA-200805-16  View
290274 56886 CVE-2007-4770 1019269  View
290275 56886 CVE-2007-4770 [icu-support] 20080122 ICU Patch for bugs in Regular Expressions  View
290276 56886 CVE-2007-4770 231641  View
290277 56886 CVE-2007-4770 233922  View
290278 56886 CVE-2007-4770 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0043  View
290279 56886 CVE-2007-4770 DSA-1511  View
290280 56886 CVE-2007-4770 MDVSA-2008:026  View
290281 56886 CVE-2007-4770 SUSE-SA:2008:023  View
290282 56886 CVE-2007-4770 http://www.openoffice.org/security/cves/CVE-2007-4770.html  View
290283 56886 CVE-2007-4770 http://www.openoffice.org/security/cves/CVE-2007-5745.html  View
290284 56886 CVE-2007-4770 20080206 rPSA-2008-0043-1 icu  View
290285 56886 CVE-2007-4770 27455  View
290286 56886 CVE-2007-4770 USN-591-1  View
290287 56886 CVE-2007-4770 ADV-2008-0282  View
290288 56886 CVE-2007-4770 ADV-2008-0807  View
290289 56886 CVE-2007-4770 ADV-2008-1375  View
290290 56886 CVE-2007-4770 libicu-restackframes-dos(39938)  View
290291 56886 CVE-2007-4770 https://bugzilla.redhat.com/show_bug.cgi?id=429023  View
290292 56886 CVE-2007-4770 https://issues.rpath.com/browse/RPL-2199  View
290293 56886 CVE-2007-4770 FEDORA-2008-1036  View
290294 56886 CVE-2007-4770 FEDORA-2008-1076  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45741 JVNDB-2008-001051 ICU の libicu における領域外メモリアクセスの脆弱性 International Components for Unicode (ICU) の libicu には、存在しないキャプチャグループ 0 () の後方参照の処理に不備があり、REStackFrames 破壊に関連する領域外メモリ配置から読み込む、または領域外メモリ配置へ書き込む脆弱性が存在します。 CVE-2007-4770 28125 CVE-2007-4770 56886 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001051.html 2008-01-22 2008-04-15 View