CVE-2011-4599

Name of the Vulnerable Software and Affected Versions International Components for Unicode (ICU) versions prior to 49.1

Description The issue is related to a stack-based buffer overflow in the canonicalize function in common/uloc.c that allows remote attackers to execute arbitrary code via a crafted locale ID. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely.

Recommendations For International Components for Unicode (ICU) versions prior to 49.1, update to version 49.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the canonicalize function in common/uloc.c until a patch is available.