CNVD-2016-05764 | Vulnetix

CNVD-2016-05764 PUBLISHED

Record from circl · Published July 25, 2016

International Components for Unicode（ICU）是一个为C/C++和Java编程语言提供了一整套操作Unicode数据的函数库，也是一个用于支持软件国际化的开源项目。 International Components for Unicode的common/uloc.cpp文件中的‘uloc_acceptLanguageFromHTTP’函数没有确认临时数组以‘\0’字符结尾，允许远程攻击者可利用漏洞提交较长的httpAcceptLanguage参数调用函数进行拒绝服务攻击。

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CNVD-2016-05764
vulnetix vdb fixes CNVD-2016-05764

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CNVD-2016-05764/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →