Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Mar 15, 2018 | Mar 15, 2018 |
| Apple Osx Icu | — | Apply OS X security update 2017-005 El CapitanApply OS X security update 2017-002 SierraUpgrade macOS to the latest version | Mar 15, 2018 | Mar 15, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 28, 2018 |
| Centos_linux | — | Upgrade chromium-browserUpgrade chromium-browser-debuginfo | Aug 28, 2019 | Aug 28, 2018 |
| Debian | — | Upgrade icu | Mar 25, 2018 | Dec 8, 2017 |
| Freebsd | — | Upgrade chromium | Jan 24, 2018 | Jan 23, 2018 |
| Gentoo Linux | — | Upgrade www-client/chromium.Upgrade www-client/google-chrome. | Jan 8, 2018 | Jan 7, 2018 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Nov 9, 2018 | Dec 6, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libicu-develUpgrade libicu | Dec 5, 2019 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libicuUpgrade libicu-devel | Sep 28, 2020 | Aug 28, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libicu-develUpgrade libicu | Feb 24, 2020 | Aug 28, 2018 |
| Oracle Solaris | — | Upgrade library/icu to version 0.5.11-0.175.3.32.0.4.10 on Solaris 11.3 | May 16, 2018 | May 16, 2018 |
| Redhat_linux | — | Upgrade chromium-browserNo solution existsUpgrade chromium-browser-debuginfo | Dec 8, 2017 | Dec 7, 2017 |
| Suse | — | Upgrade libicu52_1-dataUpgrade libicu-develUpgrade libicu-docUpgrade icuUpgrade libicu-devel-32bitUpgrade chromiumUpgrade libicu52_1Upgrade chromedriverUpgrade libicuUpgrade libicu-x86Upgrade libicu-32bitUpgrade libicu52_1-32bit | Dec 8, 2017 | Dec 8, 2017 |
| Ubuntu | — | Upgrade libicu52Upgrade libicu57Upgrade libicu55 | Apr 25, 2018 | Dec 8, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 28, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub