CVE-2017-15422

Name of the Vulnerable Software and Affected Versions: International Components for Unicode (ICU) for C/C++ versions prior to 60.1 Google Chrome versions prior to 63.0.3239.84

Description: The issue is related to an integer overflow in international date handling, which can be exploited by a remote attacker using a crafted HTML page. This can lead to an out of bounds memory read. The vulnerability may also allow an attacker to cause a denial of service or execute arbitrary code.

Recommendations: For International Components for Unicode (ICU) for C/C++ versions prior to 60.1, update to version 60.1 or later. For Google Chrome versions prior to 63.0.3239.84, update to version 63.0.3239.84 or later.