CVE-2014-8146
iTunes < 12.1.3 - Heap-Based Buffer Overflow in Unicode Bidirectional Algorithm
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-8146.
AI-analyzed exploit summary This is a technical writeup detailing two vulnerabilities (CVE-2014-8146 and CVE-2014-8147) in the ICU library, including root cause analysis, affected code snippets, and references to proof-of-concept files. It explains heap overflow and integer overflow issues in the `ubidi.c` file.
Description
The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text.
Exploits (1)
This is a technical writeup detailing two vulnerabilities (CVE-2014-8146 and CVE-2014-8147) in the ICU library, including root cause analysis, affected code snippets, and references to proof-of-concept files. It explains heap overflow and integer overflow issues in the `ubidi.c` file.