[3.5] icu: Stack based buffer overflow in locid.cpp (CVE-2016-7415)
Stack-based buffer overflow in the Locale class in common/locid.cpp in
International Components for Unicode (ICU) through 57.1 for C/C allows
remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long locale string.
Fixed In Version:
Upstream bug (private):
No patch available.
(from redmine: issue id 6548, created on 2016-12-19, closed on 2016-12-29)
main/icu: security upgrade to 58.1 (CVE-2016-7415). Fixes #6548
- Revision a32ce150 on 2016-12-27T09:01:08Z:
main/icu: security fix (CVE-2016-7415). Fixes #6548 (cherry picked from commit 1fa78865839b8c66006d1ae3a0a626e7acc7787d)