SUSE Linux Security Vulnerability: CVE-2007-4771
Description
Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers to cause a denial of service (memory consumption) and possibly have unspecified other impact via a regular expression that writes a large amount of data to the backtracking stack. NOTE: some of these details are obtained from third party information.
Solution(s)
- suse-upgrade-icu
- suse-upgrade-icu-data
- suse-upgrade-libicu
- suse-upgrade-libicu-32bit
- suse-upgrade-libicu-64bit
- suse-upgrade-libicu-devel
- suse-upgrade-libicu-devel-32bit
- suse-upgrade-libicu-devel-64bit
- suse-upgrade-libicu-doc
- suse-upgrade-openoffice_org
- suse-upgrade-openoffice_org-af
- suse-upgrade-openoffice_org-ar
- suse-upgrade-openoffice_org-base
- suse-upgrade-openoffice_org-be-by
- suse-upgrade-openoffice_org-bg
- suse-upgrade-openoffice_org-ca
- suse-upgrade-openoffice_org-calc
- suse-upgrade-openoffice_org-cs
- suse-upgrade-openoffice_org-cy
- suse-upgrade-openoffice_org-da
- suse-upgrade-openoffice_org-de
- suse-upgrade-openoffice_org-devel
- suse-upgrade-openoffice_org-draw
- suse-upgrade-openoffice_org-el
- suse-upgrade-openoffice_org-en-gb
- suse-upgrade-openoffice_org-es
- suse-upgrade-openoffice_org-et
- suse-upgrade-openoffice_org-fi
- suse-upgrade-openoffice_org-filters
- suse-upgrade-openoffice_org-fr
- suse-upgrade-openoffice_org-galleries
- suse-upgrade-openoffice_org-gnome
- suse-upgrade-openoffice_org-gu-in
- suse-upgrade-openoffice_org-hi-in
- suse-upgrade-openoffice_org-hr
- suse-upgrade-openoffice_org-hu
- suse-upgrade-openoffice_org-impress
- suse-upgrade-openoffice_org-it
- suse-upgrade-openoffice_org-ja
- suse-upgrade-openoffice_org-kde
- suse-upgrade-openoffice_org-km
- suse-upgrade-openoffice_org-ko
- suse-upgrade-openoffice_org-lt
- suse-upgrade-openoffice_org-mailmerge
- suse-upgrade-openoffice_org-math
- suse-upgrade-openoffice_org-mk
- suse-upgrade-openoffice_org-mono
- suse-upgrade-openoffice_org-nb
- suse-upgrade-openoffice_org-nl
- suse-upgrade-openoffice_org-nn
- suse-upgrade-openoffice_org-officebean
- suse-upgrade-openoffice_org-pa-in
- suse-upgrade-openoffice_org-pl
- suse-upgrade-openoffice_org-pt
- suse-upgrade-openoffice_org-pt-br
- suse-upgrade-openoffice_org-pyuno
- suse-upgrade-openoffice_org-ru
- suse-upgrade-openoffice_org-rw
- suse-upgrade-openoffice_org-sdk
- suse-upgrade-openoffice_org-sdk-doc
- suse-upgrade-openoffice_org-sk
- suse-upgrade-openoffice_org-sl
- suse-upgrade-openoffice_org-sr-cs
- suse-upgrade-openoffice_org-st
- suse-upgrade-openoffice_org-sv
- suse-upgrade-openoffice_org-testtool
- suse-upgrade-openoffice_org-tr
- suse-upgrade-openoffice_org-ts
- suse-upgrade-openoffice_org-vi
- suse-upgrade-openoffice_org-writer
- suse-upgrade-openoffice_org-xh
- suse-upgrade-openoffice_org-zh-cn
- suse-upgrade-openoffice_org-zh-tw
- suse-upgrade-openoffice_org-zu
- suse-upgrade-suse-release
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center