ICU4C contains an out-of-bounds read flaw in the 'RegexMatcher::MatchChunkAt' function in i18n/rematch.cpp when parsing Unicode strings. With a specially crafted string, a context-dependent attacker can cause a crash or potentially disclose memory contents.
Classification
Location:
Context Dependent
Attack Type:
Denial of Service,
Information Disclosure
Impact:
Loss of Confidentiality,
Loss of Availability
Solution:
Third-Party Solution,
Solution Unknown
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified,
Coordinated Disclosure
OSVDB:
Web Related
Solution
OSVDB is not currently aware of a solution for this vulnerability.
Upgrade to Google Chrome version 16.0.912.63 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
