Vulnerability Name:

CVE-2008-1036 (CCN-42717)

Assigned:2008-05-28
Published:2008-05-28
Updated:2017-09-29
Summary:The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.2 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-79
Vulnerability Consequences:Bypass Security
References:Source: CCN
Type: ICU trac Ticket #6175
Security issue with empty segments in toUnicode converters for ISO-2022-JP, HZ, ...

Source: CCN
Type: ICU trac Ticket #6198
Port to ICU4J: Security fix for ISO-2022-x & HZ toUnicode converters

Source: MITRE
Type: CNA
CVE-2008-1036

Source: APPLE
Type: Patch, Vendor Advisory
APPLE-SA-2008-05-28

Source: CCN
Type: RHSA-2009-0296
Moderate: icu security update

Source: CCN
Type: SA30430
Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
30430

Source: CCN
Type: SA34246
International Components for Unicode Conversion Error Security Bypass

Source: SECUNIA
Type: Vendor Advisory
34290

Source: SECUNIA
Type: Vendor Advisory
34777

Source: CCN
Type: SECTRACK ID: 1020139
Mac OS X ICU Character Encoding Bug Lets Remote Users Bypass Content Filters

Source: SECTRACK
Type: UNKNOWN
1020139

Source: CCN
Type: ICU Web site
ICU Home Page ?(International Components for Unicode)?

Source: CCN
Type: Apple Web site
About the security content of Security Update 2008-003 / Mac OS X 10.5.3

Source: MISC
Type: UNKNOWN
http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0064

Source: DEBIAN
Type: UNKNOWN
DSA-1762

Source: DEBIAN
Type: DSA-1762
icu -- insufficient input sanitising

Source: REDHAT
Type: UNKNOWN
RHSA-2009:0296

Source: BID
Type: UNKNOWN
29412

Source: CCN
Type: BID-29412
RETIRED: Apple Mac OS X 2008-003 Multiple Security Vulnerabilities

Source: BID
Type: UNKNOWN
29488

Source: CCN
Type: BID-29488
International Components for Unicode Invalid ISO Character Handling Vulnerability

Source: CCN
Type: USN-747-1
ICU vulnerability

Source: UBUNTU
Type: UNKNOWN
USN-747-1

Source: CERT
Type: Patch, US Government Resource
TA08-150A

Source: VUPEN
Type: Vendor Advisory
ADV-2008-1697

Source: XF
Type: UNKNOWN
macosx-icu-security-bypass(42717)

Source: XF
Type: UNKNOWN
macosx-icu-security-bypass(42717)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:10824

Vulnerable Configuration:Configuration 1:
  • cpe:/o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:5::client:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:5::client_workstation:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:5::server:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:apple:mac_os_x:10.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*
  • AND
  • cpe:/o:canonical:ubuntu:6.06::lts:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:5:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:5:*:client_workstation:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:redhat:enterprise_linux:5:*:client:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:7.10:*:*:*:*:*:*:*
  • OR cpe:/o:canonical:ubuntu:8.04::lts:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:5.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20081036
    V
    		CVE-2008-1036
    2022-06-30
    oval:org.opensuse.security:def:42361
    P
    		Security update for slirp4netns (Moderate)
    2022-03-24
    oval:org.opensuse.security:def:26222
    P
    		Security update for virglrenderer (Important) (in QA)
    2022-01-17
    oval:org.opensuse.security:def:112430
    P
    		icu-69.1-2.3 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:33116
    P
    		Security update for libvirt (Important)
    2022-01-10
    oval:org.opensuse.security:def:31722
    P
    		Security update for xorg-x11-server (Important)
    2021-12-20
    oval:org.opensuse.security:def:26183
    P
    		Security update for xorg-x11-server (Important)
    2021-12-14
    oval:org.opensuse.security:def:32241
    P
    		Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3) (Important)
    2021-12-14
    oval:org.opensuse.security:def:26173
    P
    		Security update for ruby2.1 (Important)
    2021-12-01
    oval:org.opensuse.security:def:31304
    P
    		Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)
    2021-11-19
    oval:org.opensuse.security:def:26167
    P
    		Security update for php72 (Moderate)
    2021-11-19
    oval:org.opensuse.security:def:32197
    P
    		Security update for glibc (Moderate)
    2021-10-06
    oval:org.opensuse.security:def:105936
    P
    		icu-69.1-2.3 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:26134
    P
    		Security update for the Linux Kernel (Important)
    2021-09-23
    oval:org.opensuse.security:def:31274
    P
    		Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)
    2021-09-23
    oval:org.opensuse.security:def:32175
    P
    		Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3) (Important)
    2021-08-25
    oval:org.opensuse.security:def:31672
    P
    		Security update for unrar (Moderate)
    2021-08-25
    oval:org.opensuse.security:def:31670
    P
    		Security update for python-PyYAML (Important)
    2021-08-24
    oval:org.opensuse.security:def:31666
    P
    		Security update for MozillaFirefox (Important)
    2021-08-17
    oval:org.opensuse.security:def:31659
    P
    		Security update for qemu (Important)
    2021-07-29
    oval:org.opensuse.security:def:31658
    P
    		Security update for the Linux Kernel (Important)
    2021-07-22
    oval:org.opensuse.security:def:31230
    P
    		Security update for linuxptp (Important)
    2021-07-21
    oval:org.opensuse.security:def:31218
    P
    		Security update for libsolv (Important)
    2021-06-28
    oval:org.opensuse.security:def:32136
    P
    		Security update for arpwatch (Important)
    2021-06-28
    oval:org.opensuse.security:def:26083
    P
    		Security update for zziplib (Moderate)
    2021-06-25
    oval:org.opensuse.security:def:26081
    P
    		Security update for libgcrypt (Important)
    2021-06-24
    oval:org.opensuse.security:def:26077
    P
    		Security update for apache2 (Important)
    2021-06-17
    oval:org.opensuse.security:def:31639
    P
    		Security update for freeradius-server (Moderate)
    2021-06-11
    oval:org.opensuse.security:def:36192
    P
    		libicu-32bit-4.0-7.26.15 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:32112
    P
    		Security update for libX11 (Important)
    2021-06-08
    oval:org.opensuse.security:def:36420
    P
    		icu-4.0-7.26.15 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:42599
    P
    		libicu-32bit-4.0-7.26.15 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:32918
    P
    		Security update for djvulibre (Important)
    2021-05-19
    oval:org.opensuse.security:def:32087
    P
    		Security update for cups (Important)
    2021-04-30
    oval:org.opensuse.security:def:26033
    P
    		Security update for ImageMagick (Moderate)
    2021-04-20
    oval:org.opensuse.security:def:26026
    P
    		Security update for cifs-utils (Moderate)
    2021-04-13
    oval:org.opensuse.security:def:31142
    P
    		Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP3) (Important)
    2021-04-07
    oval:org.opensuse.security:def:31366
    P
    		Security update for wavpack (Important)
    2021-03-24
    oval:org.opensuse.security:def:42158
    P
    		Security update for glib2 (Important)
    2021-03-12
    oval:org.opensuse.security:def:42157
    P
    		Security update for openssl-1_1 (Moderate)
    2021-03-09
    oval:org.opensuse.security:def:32268
    P
    		Security update for openldap2 (Important)
    2021-03-03
    oval:org.opensuse.security:def:31731
    P
    		Security update for java-1_7_1-ibm (Important)
    2021-02-18
    oval:org.opensuse.security:def:31744
    P
    		Security update for MozillaFirefox (Important)
    2021-01-12
    oval:org.opensuse.security:def:31219
    P
    		Security update for openssh (Moderate)
    2021-01-05
    oval:org.opensuse.security:def:26045
    P
    		Security update for gimp (Moderate)
    2021-01-04
    oval:org.opensuse.security:def:25981
    P
    		Security update for PackageKit (Low)
    2020-12-22
    oval:org.opensuse.security:def:25980
    P
    		Security update for MozillaFirefox (Critical)
    2020-12-21
    oval:org.opensuse.security:def:35588
    P
    		libicu-32bit-4.0-7.24.11 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:25970
    P
    		Security update for gdm (Important)
    2020-12-03
    oval:org.opensuse.security:def:35750
    P
    		libicu-32bit-4.0-7.24.11 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35751
    P
    		libicu-32bit-4.0-7.26.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:25969
    P
    		Security update for xen (Important)
    2020-12-03
    oval:org.opensuse.security:def:41995
    P
    		libicu-32bit-4.0-7.24.11 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35954
    P
    		libicu-32bit-4.0-7.26.15 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:25742
    P
    		Security update for ceph (Important)
    2020-12-01
    oval:org.opensuse.security:def:25424
    P
    		Security update for ucode-intel (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31056
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25708
    P
    		Security update for mariadb-100 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31875
    P
    		Security update for dbus-1 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26459
    P
    		Security update for chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:26588
    P
    		libicu-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25817
    P
    		Security update for pidgin-otr (Important)
    2020-12-01
    oval:org.opensuse.security:def:25565
    P
    		Security update for SUSE Manager Client Tools (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31771
    P
    		Security update for MozillaFirefox, MozillaFirefox-branding-SLED, firefox-gcc5, mozilla-nss (Important)
    2020-12-01
    oval:org.opensuse.security:def:26918
    P
    		ibutils on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31068
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25846
    P
    		Security update for gd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26517
    P
    		NetworkManager-gnome on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31422
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26254
    P
    		Security update for dia (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25769
    P
    		Security update for gd (Low)
    2020-12-01
    oval:org.opensuse.security:def:31832
    P
    		Security update for bind (Important)
    2020-12-01
    oval:org.opensuse.security:def:25140
    P
    		Security update for xmltooling (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31436
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27418
    P
    		icu on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25504
    P
    		Security update for libvirt (Important)
    2020-12-01
    oval:org.opensuse.security:def:31507
    P
    		Security update for python27 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26395
    P
    		Security update for MozillaThunderbird (Important)
    2020-12-01
    oval:org.opensuse.security:def:25857
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32676
    P
    		gnutls on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25215
    P
    		Security update for systemd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31585
    P
    		Security update for tcpdump (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32478
    P
    		Security update for zsh (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25516
    P
    		Security update for file-roller (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31968
    P
    		Security update for ipmitool (Important)
    2020-12-01
    oval:org.opensuse.security:def:26599
    P
    		libpython2_6-1_0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25915
    P
    		Security update for libosip2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25586
    P
    		Security update for libvirt (Important)
    2020-12-01
    oval:org.opensuse.security:def:31828
    P
    		Security update for bind (Important)
    2020-12-01
    oval:org.opensuse.security:def:26236
    P
    		Security update for libvpx (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:33155
    P
    		libicu-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25945
    P
    		Security update for ImageMagick (Important)
    2020-12-01
    oval:org.opensuse.security:def:26687
    P
    		e2fsprogs on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26750
    P
    		libicu-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25727
    P
    		Security update for libzypp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31933
    P
    		Security update for glibc (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27155
    P
    		kde4-kgreeter-plugins on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32324
    P
    		Security update for samba (Important)
    2020-12-01
    oval:org.opensuse.security:def:26745
    P
    		libexiv2-4 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25931
    P
    		Security update for libcares2 (Low)
    2020-12-01
    oval:org.opensuse.security:def:31994
    P
    		Security update for java-1_7_1-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:25302
    P
    		Security update for xorg-x11-server (Important)
    2020-12-01
    oval:org.opensuse.security:def:26318
    P
    		Security update for MozillaThunderbird (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32412
    P
    		Security update for wireshark (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32553
    P
    		libicu-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25741
    P
    		Security update for vino (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31510
    P
    		Security update for libX11 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26019
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:32879
    P
    		gvim on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25377
    P
    		Security update for grub2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:31788
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:26420
    P
    		Security update for phpMyAdmin (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26553
    P
    		gd on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25753
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:25481
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31057
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25789
    P
    		Security update for flash-player (Critical)
    2020-12-01
    oval:org.opensuse.security:def:32031
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26473
    P
    		Security update for Chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:31421
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:25716
    P
    		Security update for librsvg (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31810
    P
    		Security update for apache2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26953
    P
    		libicu-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25139
    P
    		Security update for sqlite3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25930
    P
    		Security update for ImageMagick (Important)
    2020-12-01
    oval:org.opensuse.security:def:27383
    P
    		ctdb-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31433
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26311
    P
    		Security update for openstack-nova and openstack-neutron (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25818
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:32038
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25151
    P
    		Security update for file-roller (Low)
    2020-12-01
    oval:org.opensuse.security:def:31528
    P
    		Security update for ruby (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25505
    P
    		Security update for python-PyYAML (Important)
    2020-12-01
    oval:org.opensuse.security:def:31876
    P
    		Security update for dhcp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26546
    P
    		findutils on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25871
    P
    		Security update for gd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32715
    P
    		libicu-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25343
    P
    		Security update for kernel-firmware (Important)
    2020-12-01
    oval:org.opensuse.security:def:25580
    P
    		Security update for LibVNCServer (Important)
    2020-12-01
    oval:org.opensuse.security:def:32025
    P
    		Security update for kernel-source (Important)
    2020-12-01
    oval:org.opensuse.security:def:26648
    P
    		wget on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26715
    P
    		gtk2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25643
    P
    		Security update for hunspell (Low)
    2020-12-01
    oval:org.opensuse.security:def:31884
    P
    		Security update for dosfstools (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26280
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26701
    P
    		ft2demos on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25878
    P
    		Security update for libqt4 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31972
    P
    		Security update for jakarta-commons-fileupload (Important)
    2020-12-01
    oval:org.opensuse.security:def:27190
    P
    		libicu-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25301
    P
    		Security update for grub2 (Important)
    2020-12-01
    oval:org.opensuse.security:def:32373
    P
    		Security update for tcpdump (Important)
    2020-12-01
    oval:org.opensuse.security:def:32514
    P
    		ft2demos on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31423
    P
    		Security update for php53 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25313
    P
    		Security update for perl-DBI (Important)
    2020-12-01
    oval:org.opensuse.security:def:26371
    P
    		Security update for Chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:32434
    P
    		Security update for xen (Important)
    2020-12-01
    oval:org.mitre.oval:def:29195
    P
    		RHSA-2009:0296 -- icu security update (Moderate)
    2015-08-17
    oval:org.mitre.oval:def:13794
    P
    		USN-747-1 -- icu vulnerability
    2014-06-30
    oval:org.mitre.oval:def:13393
    P
    		DSA-1762-1 icu -- insufficient input sanitising
    2014-06-23
    oval:org.mitre.oval:def:8408
    P
    		DSA-1762 icu -- insufficient input sanitising
    2014-06-23
    oval:org.mitre.oval:def:21796
    P
    		ELSA-2009:0296: icu security update (Moderate)
    2014-05-26
    oval:org.mitre.oval:def:10824
    V
    		The International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.
    2013-04-29
    oval:org.debian:def:1762
    V
    		insufficient input sanitising
    2009-04-02
    oval:com.redhat.rhsa:def:20090296
    P
    		RHSA-2009:0296: icu security update (Moderate)
    2009-03-12
    BACK
    apple mac os x 10.4.11
    apple mac os x 10.5
    apple mac os x 10.5.1
    apple mac os x 10.5.2
    apple mac os x server 10.4.11
    apple mac os x server 10.5
    apple mac os x server 10.5.1
    apple mac os x server 10.5.2
    redhat enterprise linux 5
    apple mac os x 10.5
    apple mac os x server 10.5
    apple mac os x 10.4.11
    apple mac os x 10.5.1
    apple mac os x server 10.4.11
    apple mac os x server 10.5.1
    apple mac os x 10.5.2
    apple mac os x server 10.5.2
    canonical ubuntu 6.06
    redhat enterprise linux 5
    redhat enterprise linux 5
    debian debian linux 4.0
    redhat enterprise linux 5
    canonical ubuntu 7.10
    canonical ubuntu 8.04
    debian debian linux 5.0