Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Mar 15, 2018 | Mar 15, 2018 |
| Apple Osx Icu | — | Apply OS X security update 2017-002 SierraApply OS X security update 2017-005 El CapitanUpgrade macOS to the latest version | Mar 15, 2018 | Mar 15, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 28, 2018 |
| Centos_linux | — | Upgrade chromium-browser-debuginfoUpgrade chromium-browser | Aug 28, 2019 | Aug 28, 2018 |
| Debian | — | Upgrade icu | Mar 25, 2018 | Dec 8, 2017 |
| Freebsd | — | Upgrade chromium | Jan 24, 2018 | Jan 23, 2018 |
| Gentoo Linux | — | Upgrade www-client/chromium.Upgrade www-client/google-chrome. | Jan 8, 2018 | Jan 7, 2018 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Nov 9, 2018 | Dec 6, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libicuUpgrade libicu-devel | Dec 5, 2019 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libicu-develUpgrade libicu | Sep 28, 2020 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libicuUpgrade libicu-devel | Feb 24, 2020 | Aug 28, 2018 |
| Oracle Solaris | — | Upgrade library/icu to version 0.5.11-0.175.3.32.0.4.10 on Solaris 11.3 | May 16, 2018 | May 16, 2018 |
| Redhat_linux | — | Upgrade chromium-browserNo solution existsUpgrade chromium-browser-debuginfo | Dec 8, 2017 | Dec 7, 2017 |
| Suse | — | Upgrade libicuUpgrade chromedriverUpgrade libicu-32bitUpgrade libicu-x86Upgrade libicu52_1Upgrade chromiumUpgrade libicu52_1-32bitUpgrade libicu-docUpgrade libicu-develUpgrade libicu52_1-dataUpgrade libicu-devel-32bitUpgrade icu | Dec 8, 2017 | Dec 8, 2017 |
| Ubuntu | — | Upgrade libicu52Upgrade libicu55Upgrade libicu57 | Apr 25, 2018 | Dec 8, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub