Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2016-6293

EPSS 3.56% · P88
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2016-6293

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long httpAcceptLanguage argument.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
International Components for Unicode common/uloc.cpp文件安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
International Components for Unicode（ICU）是美国IBM公司和其他公司共同开发的一个为C/C++和Java编程语言提供了一整套操作Unicode数据的函数库，也是一个用于支持软件国际化的开源项目。 ICU 57.1及之前的版中的common/uloc.cpp文件中的‘uloc_acceptLanguageFromHTTP’函数存在安全漏洞，该漏洞源于程序没有确认临时数组以‘’字符结尾。远程攻击者可借助较长的httpAcceptLanguage参数调用函数利用该漏洞造成
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2016-6293

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-6293

请登录查看更多情报信息。

Same Patch Batch · n/a · 2016-07-25 · 10 CVEs total

CVE-2016-6288PHP ext/standard/url.c文件安全漏洞
CVE-2016-6289PHP TSRM/tsrm_virtual_cwd.c文件整数溢出漏洞
CVE-2016-6290PHP ext/session/session.c文件安全漏洞
CVE-2016-6291PHP ext/exif/exif.c文件安全漏洞
CVE-2016-6292PHP ext/exif/exif.c文件安全漏洞
CVE-2016-6294PHP ext/intl/locale/locale_methods.c文件安全漏洞
CVE-2016-6295PHP ext/snmp/snmp.c文件安全漏洞
CVE-2016-6296PHP xmlrpc-epi simplestring.c文件整数符号错误漏洞
CVE-2016-6297PHP ext/zip/zip_stream.c文件整数溢出漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2016-6293

No comments yet

Leave a comment