CVE-2017-14952 PUBLISHED

Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue.

EPSS 2.94% · 86.3th percentile

Risk Scores

EPSS Score
2.94%
86.3th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSicu0, 55.1-4ubuntu1, 55.1-6ubuntu1
Ubuntu:14.04:LTSicu52.1-3ubuntu0.3, 52.1-3ubuntu0.4, 0

Timeline

References

Open in Interactive Console →