The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences during Unicode conversion, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Internationalcomponentsforunicode | — | Upgrade macOS to the latest version | Dec 16, 2011 | May 13, 2009 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 4.0 | Jan 5, 2012 | May 13, 2009 |
| Centos_linux | — | Upgrade icuUpgrade libicu-develUpgrade libicu-docUpgrade libicu | Dec 1, 2016 | May 13, 2009 |
| Debian | — | Upgrade icu | Jul 30, 2024 | May 13, 2009 |
| Oracle_linux | — | Upgrade libicu-docUpgrade icuUpgrade libicu-develUpgrade libicu | Oct 16, 2024 | Apr 17, 2007 |
| Suse | — | Upgrade libicu-devel-32bitUpgrade libicu-develUpgrade libicu-docUpgrade libicuUpgrade icuUpgrade libicu-x86Upgrade libicu-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libicu38 | Nov 8, 2024 | May 13, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub