CVE-2008-1036
Fixed in a distro release EPSS 3%
The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.
Products: apple mac_os_x, apple mac_os_x_server, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | icu | 4.0.1-1 |
| Debian 13 | icu | 4.0.1-1 |
| Debian 14 | icu | 4.0.1-1 |
| Debian 4.0 | icu | 3.6-2etch2 |
| Debian 5.0 | icu | 3.8.1-3+lenny1 |
| Red Hat Enterprise Linux 5 | icu | 0:3.6-5.11.2 |
| Red Hat Enterprise Linux 5 | icu-debuginfo | 0:3.6-5.11.2 |
| Red Hat Enterprise Linux 5 | libicu | 0:3.6-5.11.2 |
| Red Hat Enterprise Linux 5 | libicu-devel | 0:3.6-5.11.2 |
| Red Hat Enterprise Linux 5 | libicu-doc | 0:3.6-5.11.2 |
| openSUSE Tumbleweed | icu | 69.1-2.3 |