Sploitus

CVE-2014-8147

2 known exploits for CVE-2014-8147

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.

Apple Mac Os X
≤ 10.10.4
Apple Watchos
≤ 1.0.1
Fix
Available
CVSS 2.0
7.5 HIGH
EPSS
23.4% (98th percentile)
Weakness
CWE-189
NVD status
Modified
Published
2015-05-25
CVE-2014-8147 at NVD
Authoritative description, scoring and affected products

2 known exploits for CVE-2014-8147

Proof-of-concept code and exploit modules indexed by Sploitus