CVE-2007-1659
Fixed in a distro release EPSS 4%
Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes.
Products: pcre
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | glib2.0 | 2.14.3-1 |
| Debian 12 | pcre3 | 7.3-1 |
| Debian 13 | glib2.0 | 2.14.3-1 |
| Debian 14 | glib2.0 | 2.14.3-1 |
| Debian 3.1 | pcre3 | 4.5+7.4-1 |
| Debian 4.0 | kazehakase | 0.4.2-1etch1 |
| Debian 4.0 | pcre3 | 6.7+7.4-2 |
| Debian 5.0 | pcre3 | 6.7+7.4-2+lenny1 |
| Red Hat Enterprise Linux 4 | pcre | 0:4.5-4.el4_6.6 |
| Red Hat Enterprise Linux 4 | pcre-debuginfo | 0:4.5-4.el4_6.6 |
| Red Hat Enterprise Linux 4 | pcre-devel | 0:4.5-4.el4_6.6 |
| Red Hat Enterprise Linux 5 | pcre | 0:6.6-2.el5_0.1 |
| Red Hat Enterprise Linux 5 | pcre-debuginfo | 0:6.6-2.el5_0.1 |
| Red Hat Enterprise Linux 5 | pcre-devel | 0:6.6-2.el5_0.1 |