Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a redundant UVector entry clean up function call issue.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| International_components_for_unicode | Icu-project | * | 59.1 (including) |
| Icu | Ubuntu | artful | * |
| Icu | Ubuntu | devel | * |
| Icu | Ubuntu | trusty | * |
| Icu | Ubuntu | xenial | * |
| Icu | Ubuntu | zesty | * |