The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.
CVSS Details
- CVSS 3.1 Base Score: 3.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Internationalcomponentsforunicode | — | Upgrade macOS to the latest versionApply OS X security update 2008-003 | Dec 16, 2011 | Jun 2, 2008 |
| Debian | — | Upgrade icu | Jul 30, 2024 | Jun 2, 2008 |
| Oracle_linux | — | Upgrade libicu-docUpgrade libicu-develUpgrade icuUpgrade libicu | Oct 16, 2024 | Jun 2, 2008 |
| Suse | — | Upgrade icuUpgrade libicu-x86Upgrade libicu77Upgrade libicuUpgrade libicu77-ledataUpgrade libicu-32bitUpgrade libicu-develUpgrade libicu77-bedataUpgrade libicu-devel-32bitUpgrade libicu-doc | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libicu36Upgrade libicu38Upgrade libicu34 | Nov 8, 2024 | Jun 2, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub