CVE-2007-4771

Published: 01/29/2008 00:00:00
Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers to cause a denial of service (memory consumption) and possibly have unspecified other impact via a regular expression that writes a large amount of data to the backtracking stack. NOTE: some of these details are obtained from third party information.
HIGH
CVSS v2: 9.3

Status

DocFilters Release Package State Justification Comment
25.1 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
24.4 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
24.4.0 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
24.3 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
24.2.1 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
24.2 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
24.1 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
23.3 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
23.2.1 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
23.2 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
23.1 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
22.4 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
22.3 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
22.2 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
22.1 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
21.11.1 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
21.11 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
21.8.1 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
21.8 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
21.5.1 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
21.5.0 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
21.2.0 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.20 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.19.3667 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.18.3599 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.17 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.16.3445 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.15.3368 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.14.3263 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.13.3179 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.12.3054 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.11.3040 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.11.2990 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.10.2934 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.9.2878 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.
11.4.8.2822 international_components_for_unicode (58.1) Not Affected Code Not Present 58.1 does not match CVE configuration.

Severity score breakdown

References