CVE-2014-8146
Published: 31 December 2014
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
icu Launchpad, Ubuntu, Debian |
precise |
Not vulnerable
(code not present)
|
| trusty |
Released
(52.1-3ubuntu0.3)
|
|
| upstream |
Released
(55.1)
|
|
| utopic |
Released
(52.1-6ubuntu0.3)
|
|
| vivid |
Released
(52.1-8ubuntu0.1)
|
|
|
Patches: upstream: http://bugs.icu-project.org/trac/changeset/37162 |
||