CVE-2007-4771
Fixed in a distro release EPSS 3%
Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers to cause a denial of service (memory consumption) and possibly have unspecified other impact via a regular expression that writes a large amount of data to the backtracking stack. NOTE: some of these details are obtained from third party information.
Products: icu-project international_components_for_unicode
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | icu | 3.8-6 |
| Debian 13 | icu | 3.8-6 |
| Debian 14 | icu | 3.8-6 |
| Debian 4.0 | icu | 3.6-2etch1 |
| Red Hat Enterprise Linux 5 | icu | 0:3.6-5.11.1 |
| Red Hat Enterprise Linux 5 | icu-debuginfo | 0:3.6-5.11.1 |
| Red Hat Enterprise Linux 5 | libicu | 0:3.6-5.11.1 |
| Red Hat Enterprise Linux 5 | libicu-devel | 0:3.6-5.11.1 |
| Red Hat Enterprise Linux 5 | libicu-doc | 0:3.6-5.11.1 |