VULNERABILITY INTELLIGENCE
CVE-2007-4770
CVSS score6.8 MEDIUM
EPSS probability2.93%
CISA KEVNot currently listed
Published2008-01-29
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames.
Primary references
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Permissions Required
- cve@mitre.org — Permissions Required
- cve@mitre.org — Permissions Required
- cve@mitre.org — Permissions Required
- cve@mitre.org — Permissions Required
- cve@mitre.org — Permissions Required
- cve@mitre.org — Permissions Required
- cve@mitre.org — Permissions Required
- cve@mitre.org — Permissions Required
- cve@mitre.org — Permissions Required