CVE-2007-4770
- State
- Published
- Severity
- Not scored
- Published
- Jan 28, 2008
- Updated
- Aug 7, 2024
- Reserved
- Sep 10, 2007
Description
libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- oval:org.mitre.oval:def:11172vdb-entrysignature
- 233922vendor-advisory
- 28615third-party-advisory
- oval:org.mitre.oval:def:5507vdb-entrysignature
- 29852third-party-advisory
- 28783third-party-advisory
- 29291third-party-advisory
- SUSE-SA:2008:023vendor-advisory
- 29242third-party-advisory
- 1019269vdb-entry
- GLSA-200805-16vendor-advisory
- 29987third-party-advisory
- SUSE-SR:2008:005vendor-advisory
- 27455vdb-entry
- 29294third-party-advisory
- http://www.openoffice.org/security/cves/CVE-2007-4770.html
- GLSA-200803-20vendor-advisory
- DSA-1511vendor-advisory
- libicu-restackframes-dos(39938)vdb-entry
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0043
- RHSA-2008:0090vendor-advisory
- 29333third-party-advisory
- https://issues.rpath.com/browse/RPL-2199
- USN-591-1vendor-advisory
- MDVSA-2008:026vendor-advisory
- 231641vendor-advisory
- ADV-2008-1375vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=429023
- 29194third-party-advisory
- 30179third-party-advisory
- FEDORA-2008-1076vendor-advisory
- http://www.openoffice.org/security/cves/CVE-2007-5745.html
- 28575third-party-advisory
- 20080206 rPSA-2008-0043-1 icumailing-list
- [icu-support] 20080122 ICU Patch for bugs in Regular Expressionsmailing-list
- 28669third-party-advisory
- ADV-2008-0807vdb-entry
- 29910third-party-advisory
- FEDORA-2008-1036vendor-advisory
- ADV-2008-0282vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.