CVE-2009-0153
CVE-2009-0153
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences during Unicode conversion, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.
EPSS 3.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://support.apple.com/kb/HT3639
- http://www.vupen.com/english/advisories/2009/1621
- http://support.apple.com/kb/HT3549
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
- http://www.redhat.com/support/errata/RHSA-2009-1122.html
- http://secunia.com/advisories/35074
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50488
- http://www.vupen.com/english/advisories/2009/1522
- http://www.securityfocus.com/bid/34974
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
- http://bugs.icu-project.org/trac/ticket/5691
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00336.html
- http://secunia.com/advisories/35379
- http://www.securityfocus.com/bid/34926
- http://secunia.com/advisories/35498
- http://www.us-cert.gov/cas/techalerts/TA09-133A.html
- http://secunia.com/advisories/35584
- http://www.vupen.com/english/advisories/2009/1297
- https://bugzilla.redhat.com/show_bug.cgi?id=503071
- http://secunia.com/advisories/35436
- http://support.apple.com/kb/HT3613
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00478.html
- https://nvd.nist.gov/vuln/detail/CVE-2009-0153