Atte Kettunen discovered that ICU incorrectly handled certain converter names. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash. (CVE-2015-1270)
It was discovered that ICU incorrectly handled certain memory operations when processing data. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program. (CVE-2015-2632, CVE-2015-4760)
{ "availability": "No subscription required", "binaries": [ { "binary_version": "52.1-3ubuntu0.4", "binary_name": "icu-devtools" }, { "binary_version": "52.1-3ubuntu0.4", "binary_name": "icu-devtools-dbgsym" }, { "binary_version": "52.1-3ubuntu0.4", "binary_name": "icu-doc" }, { "binary_version": "52.1-3ubuntu0.4", "binary_name": "libicu-dev" }, { "binary_version": "52.1-3ubuntu0.4", "binary_name": "libicu-dev-dbgsym" }, { "binary_version": "52.1-3ubuntu0.4", "binary_name": "libicu52" }, { "binary_version": "52.1-3ubuntu0.4", "binary_name": "libicu52-dbg" }, { "binary_version": "52.1-3ubuntu0.4", "binary_name": "libicu52-dbgsym" } ] }