CVE-2007-4771: icu-project international_components_for_unicode Resource Management Errors

EPSS trend

Probability

2.54%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

0.00 pp

From 2.54% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.54%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

41 links

exchange.xforce.ibmcloud.com/vulnerabilities/39936VDB EntryX Refsource XFThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-233922-1Vendor AdvisoryX Refsource SUNALERTBroken Link
secunia.com/advisories/28615Third Party AdvisoryX Refsource SECUNIAPermissions Required
secunia.com/advisories/29852Third Party AdvisoryX Refsource SECUNIAPermissions Required
secunia.com/advisories/28783Third Party AdvisoryX Refsource SECUNIAPermissions Required
secunia.com/advisories/29291Third Party AdvisoryX Refsource SECUNIAPermissions Required
www.novell.com/linux/security/advisories/2008_23_openoffice.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
secunia.com/advisories/29242Third Party AdvisoryX Refsource SECUNIAPermissions Required
bugzilla.redhat.com/show_bug.cgi?id=429025X Refsource CONFIRMIssue TrackingThird Party Advisory
securitytracker.com/id?1019269VDB EntryX Refsource SECTRACKThird Party Advisory

Show all 41 references

security.gentoo.org/glsa/glsa-200805-16.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/29987Third Party AdvisoryX Refsource SECUNIAPermissions Required
lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
www.securityfocus.com/bid/27455VDB EntryX Refsource BIDPatchThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10507VDB EntrySignatureX Refsource OVALThird Party Advisory
secunia.com/advisories/29294Third Party AdvisoryX Refsource SECUNIAPermissions Required
www.openoffice.org/security/cves/CVE-2007-4770.htmlX Refsource CONFIRMThird Party Advisory
security.gentoo.org/glsa/glsa-200803-20.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.debian.org/security/2008/dsa-1511Vendor AdvisoryX Refsource DEBIANThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5431VDB EntrySignatureX Refsource OVALThird Party Advisory
wiki.rpath.com/wiki/Advisories:rPSA-2008-0043X Refsource CONFIRMThird Party Advisory
rhn.redhat.com/errata/RHSA-2008-0090.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/29333Third Party AdvisoryX Refsource SECUNIAPermissions Required
issues.rpath.com/browse/RPL-2199X Refsource CONFIRMThird Party Advisory
www.ubuntu.com/usn/usn-591-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2008:026Vendor AdvisoryX Refsource MANDRIVABroken Link
sunsolve.sun.com/search/document.do?assetkey=1-26-231641-1Vendor AdvisoryX Refsource SUNALERTBroken Link
www.vupen.com/english/advisories/2008/1375/referencesVDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/29194Third Party AdvisoryX Refsource SECUNIAPermissions Required
secunia.com/advisories/30179Third Party AdvisoryX Refsource SECUNIAPermissions Required
www.redhat.com/archives/fedora-package-announce/2008-January/msg00921.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
www.openoffice.org/security/cves/CVE-2007-5745.htmlX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/28575Third Party AdvisoryX Refsource SECUNIAPermissions Required
www.securityfocus.com/archive/1/487677/100/0/threadedMailing ListX Refsource BUGTRAQ
sourceforge.net/mailarchive/…Mailing ListX Refsource MLISTThird Party Advisory
secunia.com/advisories/28669Third Party AdvisoryX Refsource SECUNIAPermissions Required
www.vupen.com/english/advisories/2008/0807/referencesVDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/29910Third Party AdvisoryX Refsource SECUNIAPermissions Required
www.redhat.com/archives/fedora-package-announce/2008-January/msg00896.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
www.vupen.com/english/advisories/2008/0282VDB EntryX Refsource VUPENThird Party Advisory
security-tracker.debian.org/tracker/CVE-2007-4771Advisory

Related vulnerabilities

CVE-2018-18928debianicu+22.90%7y ago04-11-2018 20:00International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.CVE-2015-5922applemac_os_x+22.96%11y ago09-10-2015 01:00Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS before 2, has unknown impact and attack vectors.CVE-2007-4770debianicu+12.93%18y ago28-01-2008 23:00libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers to read from, or write to, out-of-bounds memory locations, related to corruption of REStackFrames.CVE-2016-7415alpineicu+35.80%10y ago17-09-2016 21:00Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long locale string.CVE-2016-6293alpineicu+45.02%10y ago25-07-2016 14:00The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long httpAcceptLanguage argument.CVE-2020-10531alpineicu+722.67%6y ago12-03-2020 18:09An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

All vulnerabilities ininternational_components_for_unicode

CVE-2007-4771: icu-project international_components_for_unicode Resource Management Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References