CVE-2009-0153
CVE-2009-0153
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.
International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences during Unicode conversion, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.
EPSS 3,7% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
icu Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 4.0.1-1
Mettez à jour vers 4.0.1-1
icu Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 4.0.1-1
Mettez à jour vers 4.0.1-1
icu Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 4.0.1-1
Mettez à jour vers 4.0.1-1
Sources originales
- http://support.apple.com/kb/HT3639
- http://www.vupen.com/english/advisories/2009/1621
- http://support.apple.com/kb/HT3549
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
- http://www.redhat.com/support/errata/RHSA-2009-1122.html
- http://secunia.com/advisories/35074
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50488
- http://www.vupen.com/english/advisories/2009/1522
- http://www.securityfocus.com/bid/34974
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
- http://bugs.icu-project.org/trac/ticket/5691
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00336.html
- http://secunia.com/advisories/35379
- http://www.securityfocus.com/bid/34926
- http://secunia.com/advisories/35498
- http://www.us-cert.gov/cas/techalerts/TA09-133A.html
- http://secunia.com/advisories/35584
- http://www.vupen.com/english/advisories/2009/1297
- https://bugzilla.redhat.com/show_bug.cgi?id=503071
- http://secunia.com/advisories/35436
- http://support.apple.com/kb/HT3613
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00478.html
- https://nvd.nist.gov/vuln/detail/CVE-2009-0153