CVE:CVE-2020-10531
CNNVD:CNNVD-202003-786
IBM International Components for Unicode（ICU）是美国IBM公司的一个为C/C++和Java编程语言提供了一整套操作Unicode数据的函数库，也是一个用于支持软件国际化的开源项目。
IBM International Components for Unicode（ICU） 66.1及之前版本中的common/unistr.cpp文件的‘UnicodeString::doAppend()’函数存在输入验证错误漏洞。攻击者可利用该漏洞执行任意代码，或者导致应用程序崩溃。
solution:Upgrade icu-project international_components_for_unicode to a higher version than 66.1,and avoid the version (,66.1]; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade google chrome to a higher version than 80.0.3987.122,and avoid the version (,80.0.3987.122); Upgrade fedoraproject fedora to a higher version than 30,31,33,and avoid the version 30,31,33; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,19.10,and avoid the version 12.04,14.04,16.04,18.04,19.10; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade oracle banking_extensibility_workbench to a higher version than 14.3.0,14.4.0,and avoid the version 14.3.0,14.4.0; Upgrade nodejs node.js to a higher version than 10.12.0,10.21.0,and avoid the version [10.0.0,10.12.0],[10.13.0,10.21.0)