CVE-2007-1660
Fixed in a distro release EPSS 4%
Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Products: pcre
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | glib2.0 | 2.14.3-1 |
| Debian 12 | pcre3 | 7.3-1 |
| Debian 13 | glib2.0 | 2.14.3-1 |
| Debian 14 | glib2.0 | 2.14.3-1 |
| Debian 3.1 | pcre3 | 4.5+7.4-1 |
| Debian 4.0 | kazehakase | 0.4.2-1etch1 |
| Debian 4.0 | pcre3 | 6.7+7.4-2 |
| Debian 5.0 | pcre3 | 6.7+7.4-2+lenny1 |
| Red Hat Enterprise Linux 2.1 | pcre | 0:3.4-2.4 |
| Red Hat Enterprise Linux 2.1 | pcre-devel | 0:3.4-2.4 |
| Red Hat Enterprise Linux 2.1 | php | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-devel | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-imap | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-ldap | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-manual | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-mysql | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-odbc | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 2.1 | php-pgsql | 0:4.1.2-2.20 |
| Red Hat Enterprise Linux 3 | pcre | 0:3.9-10.4 |
| Red Hat Enterprise Linux 3 | pcre-debuginfo | 0:3.9-10.4 |
| Red Hat Enterprise Linux 3 | pcre-devel | 0:3.9-10.4 |
| Red Hat Enterprise Linux 4 | pcre | 0:4.5-4.el4_5.1 |
| Red Hat Enterprise Linux 4 | pcre-debuginfo | 0:4.5-4.el4_5.1 |
| Red Hat Enterprise Linux 4 | pcre-devel | 0:4.5-4.el4_5.1 |
| Red Hat Enterprise Linux 5 | pcre | 0:6.6-2.el5_0.1 |
| Red Hat Enterprise Linux 5 | pcre-debuginfo | 0:6.6-2.el5_0.1 |
| Red Hat Enterprise Linux 5 | pcre-devel | 0:6.6-2.el5_0.1 |