CVE-2011-4599

Published: Jun 21, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote attackers to execute arbitrary code via a crafted locale ID that is not properly handled during variant canonicalization.

Affected (1)

Products: Icu Project: International Components For Unicode

Icu Project

1 product

International Components For Unicode

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Icu Project International Components For Unicode	Before 49.1

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (42)

http://bugs.icu-project.org/trac/ticket/8984

Source: secalert@redhat.com

Issue TrackingVendor Advisory

http://code.google.com/p/chromium/issues/detail?id=106441

Source: secalert@redhat.com

Third Party Advisory

http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2012-01/msg00035.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2011-1815.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/47146

Source: secalert@redhat.com

Permissions Required

http://secunia.com/advisories/47227

Source: secalert@redhat.com

Permissions Required

http://secunia.com/advisories/47674

Source: secalert@redhat.com

Permissions Required

http://secunia.com/advisories/47714

Source: secalert@redhat.com

Permissions Required

http://secunia.com/advisories/47775

Source: secalert@redhat.com

Permissions Required

http://support.apple.com/kb/HT5501

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT5503

Source: secalert@redhat.com

Third Party Advisory

http://ubuntu.com/usn/usn-1348-1

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2012/dsa-2397

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2011:194

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2011/12/09/2

Source: secalert@redhat.com

Mailing List

http://www.openwall.com/lists/oss-security/2011/12/09/5

Source: secalert@redhat.com

Mailing List

http://www.osvdb.org/77698

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/bid/51006

Source: secalert@redhat.com

PatchThird Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/71726

Source: secalert@redhat.com

VDB Entry

http://bugs.icu-project.org/trac/ticket/8984