| Description: | The International Components for Unicode (ICU) library provides robust and full-featured Unicode services.
Will Drewry reported multiple flaws in the way libicu processed certain malformed regular expressions. If an application linked against ICU, such as OpenOffice.org, processed a carefully crafted regular expression, it may be possible to execute arbitrary code as the user running the application. (CVE-2007-4770, CVE-2007-4771)
All users of icu should upgrade to these updated packages, which contain backported patches to resolve these issues.
|