CVE-2014-8147: High severity apple ios and macos vulnerability
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8147?
CVE-2014-8147 is considered a medium severity vulnerability that can lead to denial of service.
How do I fix CVE-2014-8147?
To fix CVE-2014-8147, update to ICU4C version 55.1 or later.
What software is affected by CVE-2014-8147?
CVE-2014-8147 affects macOS Yosemite versions up to 10.10.4, watchOS 1.0.1, and ICU versions prior to 55.1.
What kind of attack is possible with CVE-2014-8147?
CVE-2014-8147 allows remote attackers to exploit the vulnerability to cause a denial of service.
Can CVE-2014-8147 be exploited remotely?
Yes, CVE-2014-8147 can be exploited remotely due to its nature in the Unicode Bidirectional Algorithm.