Debian/icu: unknown

libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers

Action: Upgrade icu to 3.8-6 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-4770#Debian:14/icu
• https://security-tracker.debian.org/tracker/CVE-2007-4770

published 2008-01-29T00:00:00Z · modified 2026-10-21T17:47:39.338132725Z · JSON