Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Gentoo: GLSA-200803-20 High: Unicode Libraries Risk Remote Code Execution

gentoo
Calendar Grey March 12, 2008
Scroller Gentoo
Gentoo GLSA-202108-15 highlights critical security flaws in font handling systems, which could permit unauthorized remote code execution.
Two vulnerabilities have been discovered in the International Components for Unicode, possibly resulting in the remote execution of arbitrary code or a Denial of Service

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200803-20
                                            https://security.gentoo.org/

  Severity: High
     Title:  International Components for Unicode: Multiple
            vulnerabilities
      Date: March 11, 2008
      Bugs: #208001
        ID: 200803-20


Synopsis
=======
Two vulnerabilities have been discovered in the International
Components for Unicode, possibly resulting in the remote execution of
arbitrary code or a Denial of Service.

Background
=========
International Components for Unicode is a set of C/C++ and Java
libraries providing Unicode and Globalization support for software
applications.

Affected packages
================
    -------------------------------------------------------------------
     Package       /  Vulnerable  /                         Unaffected
    -----------------------------------------------...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory high severity gentoo remote code execution unicode risk

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo remote code execution unicode risk

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround