The ucnviogetConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names with initial x- substrings, which allows remote attackers to cause a denial of service (read of uninitialized memory) or possibly have unspecified other impact via a crafted file.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "chromium-chromedriver": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-browser-dbg": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-codecs-ffmpeg-dbg": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-browser-dbgsym": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-codecs-ffmpeg-extra-dbgsym": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-codecs-ffmpeg": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-chromedriver-dbgsym": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-browser": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-codecs-ffmpeg-extra-dbg": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-codecs-ffmpeg-dbgsym": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-browser-l10n": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-chromedriver-dbg": "44.0.2403.89-0ubuntu0.14.04.1.1095", "chromium-codecs-ffmpeg-extra": "44.0.2403.89-0ubuntu0.14.04.1.1095" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "libicu-dev-dbgsym": "52.1-3ubuntu0.4", "icu-doc": "52.1-3ubuntu0.4", "libicu-dev": "52.1-3ubuntu0.4", "icu-devtools": "52.1-3ubuntu0.4", "libicu52-dbg": "52.1-3ubuntu0.4", "libicu52-dbgsym": "52.1-3ubuntu0.4", "libicu52": "52.1-3ubuntu0.4", "icu-devtools-dbgsym": "52.1-3ubuntu0.4" } ] }