Public bug reported:

Binary package hint: libicu36

References:
MDVSA-2008:026 
(http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:026)

Quoting:
"Will Drewry reported multiple flaws in how libicu processed certain
malformed regular expressions. If an application linked against
libicu, such as OpenOffice.org, processed a carefully-crafted regular
expression, it could potentially cause the execution of arbitrary
code with the privileges of the user running the application."

** Affects: icu (Ubuntu)
     Importance: Undecided
         Status: New

** Visibility changed to: Public

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2007-4770

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2007-4771

-- 
[libicu] [CVE-2007-4770] [CVE-2007-4771] potential execution of arbitrary code 
via malformed regular expressions
https://bugs.launchpad.net/bugs/186578
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to