Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Производитель ПО
Наименование ПО
icu
(Unknown)
Описание
International Components для Unicode (ICU) при использовании в Apple Mac OS X, iPhone OS, iPhone OS для iPod touch, Fedora и, возможно, в других операционных системах некорректно обрабатывает неверные последовательности байт при Unicode-преобразовании, что может позволить злоумышленникам, действующим удаленно, провести атаку межсайтового выполнения сценариев.
Как исправить
Для устранения уязвимости необходимо установить последнюю версию продукта, соответствующую используемой платформе. Необходимую информацию можно получить по адресу:
http://xforce.iss.net/xforce/xfdb/50488
http://xforce.iss.net/xforce/xfdb/50488
Ссылки
CERT (TA09-133A): http://www.us-cert.gov/cas/techalerts/TA09-133A.html
CONFIRM (http://support.apple.com/kb/HT3549): http://support.apple.com/kb/HT3549
APPLE (APPLE-SA-2009-05-12): http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
FEDORA (FEDORA-2009-6273): https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00478.html
FEDORA (FEDORA-2009-6121): https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00336.html
CONFIRM (https://bugzilla.redhat.com/show_bug.cgi?id=503071): https://bugzilla.redhat.com/show_bug.cgi?id=503071
XF (macos-icu-security-bypass(50488)): http://xforce.iss.net/xforce/xfdb/50488
VUPEN (ADV-2009-1621): http://www.vupen.com/english/advisories/2009/1621
VUPEN (ADV-2009-1522): http://www.vupen.com/english/advisories/2009/1522
VUPEN (ADV-2009-1297): http://www.vupen.com/english/advisories/2009/1297
BID (34974): http://www.securityfocus.com/bid/34974
BID (34926): http://www.securityfocus.com/bid/34926
REDHAT (RHSA-2009:1122): http://www.redhat.com/support/errata/RHSA-2009-1122.html
CONFIRM (http://support.apple.com/kb/HT3639): http://support.apple.com/kb/HT3639
CONFIRM (http://support.apple.com/kb/HT3613): http://support.apple.com/kb/HT3613
APPLE (APPLE-SA-2009-06-17-1): http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
APPLE (APPLE-SA-2009-06-08-1): http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
CONFIRM (http://bugs.icu-project.org/trac/ticket/5691): http://bugs.icu-project.org/trac/ticket/5691
CONFIRM (http://support.apple.com/kb/HT3549): http://support.apple.com/kb/HT3549
APPLE (APPLE-SA-2009-05-12): http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
FEDORA (FEDORA-2009-6273): https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00478.html
FEDORA (FEDORA-2009-6121): https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00336.html
CONFIRM (https://bugzilla.redhat.com/show_bug.cgi?id=503071): https://bugzilla.redhat.com/show_bug.cgi?id=503071
XF (macos-icu-security-bypass(50488)): http://xforce.iss.net/xforce/xfdb/50488
VUPEN (ADV-2009-1621): http://www.vupen.com/english/advisories/2009/1621
VUPEN (ADV-2009-1522): http://www.vupen.com/english/advisories/2009/1522
VUPEN (ADV-2009-1297): http://www.vupen.com/english/advisories/2009/1297
BID (34974): http://www.securityfocus.com/bid/34974
BID (34926): http://www.securityfocus.com/bid/34926
REDHAT (RHSA-2009:1122): http://www.redhat.com/support/errata/RHSA-2009-1122.html
CONFIRM (http://support.apple.com/kb/HT3639): http://support.apple.com/kb/HT3639
CONFIRM (http://support.apple.com/kb/HT3613): http://support.apple.com/kb/HT3613
APPLE (APPLE-SA-2009-06-17-1): http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
APPLE (APPLE-SA-2009-06-08-1): http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
CONFIRM (http://bugs.icu-project.org/trac/ticket/5691): http://bugs.icu-project.org/trac/ticket/5691
