CVE-2007-4768

Published: Nov 7, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized.

Affected (3)

Products: Pcre: Pcre

Pcre

1 product

Pcre

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Pcre Pcre	Up to 6.0
Pcre Pcre	Up to 6.1
Pcre Pcre	Up to 7.3

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (120)

http://bugs.gentoo.org/show_bug.cgi?id=198976

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307179

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307562

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html

Source: cve@mitre.org

http://mail.gnome.org/archives/gtk-devel-list/2007-November/msg00022.html

Source: cve@mitre.org

http://secunia.com/advisories/27538

Source: cve@mitre.org

http://secunia.com/advisories/27543

Source: cve@mitre.org

http://secunia.com/advisories/27554

Source: cve@mitre.org

http://secunia.com/advisories/27697

Source: cve@mitre.org

http://secunia.com/advisories/27741

Source: cve@mitre.org

http://secunia.com/advisories/28136

Source: cve@mitre.org

http://secunia.com/advisories/28157

Source: cve@mitre.org

http://secunia.com/advisories/28161

Source: cve@mitre.org

http://secunia.com/advisories/28213

Source: cve@mitre.org

http://secunia.com/advisories/28406

Source: cve@mitre.org

http://secunia.com/advisories/28414

Source: cve@mitre.org

http://secunia.com/advisories/28570

Source: cve@mitre.org

http://secunia.com/advisories/28714

Source: cve@mitre.org

http://secunia.com/advisories/28720

Source: cve@mitre.org

http://secunia.com/advisories/29267

Source: cve@mitre.org

http://secunia.com/advisories/29420

Source: cve@mitre.org

http://secunia.com/advisories/30106

Source: cve@mitre.org

http://secunia.com/advisories/30155

Source: cve@mitre.org

http://secunia.com/advisories/30219

Source: cve@mitre.org

http://secunia.com/advisories/30507

Source: cve@mitre.org

http://secunia.com/advisories/30840

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200711-30.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200801-02.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200801-18.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200801-19.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200805-11.xml

Source: cve@mitre.org

http://securitytracker.com/id?1019116

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1

Source: cve@mitre.org

http://www.adobe.com/support/security/bulletins/apsb07-20.html

Source: cve@mitre.org

http://www.adobe.com/support/security/bulletins/apsb08-13.html

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1399

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1570

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:211

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-1126.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/483357/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/483579/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/26346

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA07-352A.html

Source: cve@mitre.org

US Government Resource

http://www.us-cert.gov/cas/techalerts/TA07-355A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2007/3725

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3790

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/4238

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/4258

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0924/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1724/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1966/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/38278

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1738

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9701

Source: cve@mitre.org

https://usn.ubuntu.com/547-1/

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=198976