REDHAT-BUG-464168: XSS
Common Vulnerabilities and Exposures assigned an identifier CVE-2008-1036 to the following vulnerability:
International Components for Unicode (ICU) in Apple Mac OS X before 10.5.3 omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.
References:
http://lists.apple.com/archives/security-announce/2008//May/msg00001.html
Proposed patch (icu part):
http://bugs.icu-project.org/trac/search?q=%22ticket:6175:%22&noquickjump=1&changeset=on
Proposed patch (icu4j part):
http://bugs.icu-project.org/trac/search?q=%22ticket:6198:%22&noquickjump=1&changeset=on
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-464168?
REDHAT-BUG-464168 is classified as a high-severity vulnerability due to potential security risks associated with improper character sequence handling.
How do I fix REDHAT-BUG-464168?
To fix REDHAT-BUG-464168, update your Apple Mac OS X to version 10.5.3 or later where the vulnerability is addressed.
What systems are affected by REDHAT-BUG-464168?
REDHAT-BUG-464168 affects Apple Mac OS X versions before 10.5.3 and the International Components for Unicode (ICU) library.
What is the nature of the vulnerability identified in REDHAT-BUG-464168?
The vulnerability identified in REDHAT-BUG-464168 involves the omission of some invalid character sequences in the ICU library, which can lead to security risks.
Is there a workaround for REDHAT-BUG-464168?
There are no recommended workarounds for REDHAT-BUG-464168; the only solution is to upgrade to a patched version of the affected software.