Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Mar 15, 2018 | Mar 14, 2018 |
| Apple Osx Icu | — | Upgrade macOS to the latest versionApply OS X security update 2017-005 El CapitanApply OS X security update 2017-002 Sierra | Mar 15, 2018 | Mar 15, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 28, 2018 |
| Centos_linux | — | Upgrade chromium-browser-debuginfoUpgrade chromium-browser | Aug 28, 2019 | Aug 28, 2018 |
| Debian | — | Upgrade icu | Mar 25, 2018 | Dec 8, 2017 |
| Freebsd | — | Upgrade chromium | Jan 24, 2018 | Jan 23, 2018 |
| Gentoo Linux | — | Upgrade www-client/google-chrome.Upgrade www-client/chromium. | Jan 8, 2018 | Jan 7, 2018 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Nov 9, 2018 | Dec 6, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libicu-develUpgrade libicu | Dec 5, 2019 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libicu-develUpgrade libicu | Sep 28, 2020 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libicuUpgrade libicu-devel | Feb 24, 2020 | Aug 28, 2018 |
| Oracle Solaris | — | Upgrade library/icu to version 0.5.11-0.175.3.32.0.4.10 on Solaris 11.3 | May 16, 2018 | May 16, 2018 |
| Redhat_linux | — | Upgrade chromium-browserNo solution existsUpgrade chromium-browser-debuginfo | Dec 8, 2017 | Dec 7, 2017 |
| Suse | — | Upgrade libicu52_1-32bitUpgrade chromiumUpgrade chromedriverUpgrade libicuUpgrade libicu-x86Upgrade libicu52_1Upgrade libicu-32bitUpgrade libicu52_1-dataUpgrade icuUpgrade libicu-devel-32bitUpgrade libicu-docUpgrade libicu-devel | Dec 8, 2017 | Dec 8, 2017 |
| Ubuntu | — | Upgrade libicu57Upgrade libicu52Upgrade libicu55 | Apr 25, 2018 | Dec 8, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub