CVE-2007-1660

Published: Nov 7, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Affected (1)

Products: Pcre: Pcre

Pcre

1 product

Pcre

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pcre Pcre	Up to 6.9

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (130)

http://bugs.gentoo.org/show_bug.cgi?id=198976

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307179

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307562

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html

Source: cve@mitre.org

http://lists.vmware.com/pipermail/security-announce/2008/000014.html

Source: cve@mitre.org

http://mail.gnome.org/archives/gtk-devel-list/2007-November/msg00022.html

Source: cve@mitre.org

http://secunia.com/advisories/27538

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27543

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27547

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27554

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27598

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27697

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27741

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27773

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27776

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27862

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27965

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28136

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28406

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28414

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28658

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28714

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28720

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29420

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29785

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30106

Source: cve@mitre.org

http://secunia.com/advisories/30155

Source: cve@mitre.org

http://secunia.com/advisories/30219

Source: cve@mitre.org

http://secunia.com/advisories/31124

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200711-30.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200801-02.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200801-18.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200801-19.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200805-11.xml

Source: cve@mitre.org

http://securitytracker.com/id?1018895

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2007-488.htm

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1399

Source: cve@mitre.org

Patch

http://www.debian.org/security/2008/dsa-1570

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:211

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:212

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:213

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_25_sr.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_62_pcre.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0967.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0968.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-1063.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-1065.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0546.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/483357/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/483579/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/490917/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/26346

Source: cve@mitre.org

Patch

http://www.us-cert.gov/cas/techalerts/TA07-352A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2007/3725

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3790

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/4238

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0924/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1234/references

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=315881

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/38273

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1738

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10562

Source: cve@mitre.org

https://usn.ubuntu.com/547-1/

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=198976