CVE-2008-0674

Published: Feb 18, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255.

Affected (1)

Products: Pcre: Pcre

Pcre

1 product

Pcre

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pcre Pcre	Up to 7.5

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (108)

http://ftp.gnome.org/pub/gnome/sources/glib/2.14/glib-2.14.6.news

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html

Source: secalert@redhat.com

http://pcre.org/changelog.txt

Source: secalert@redhat.com

http://secunia.com/advisories/28923

Source: secalert@redhat.com

http://secunia.com/advisories/28957

Source: secalert@redhat.com

http://secunia.com/advisories/28960

Source: secalert@redhat.com

http://secunia.com/advisories/28985

Source: secalert@redhat.com

http://secunia.com/advisories/28996

Source: secalert@redhat.com

http://secunia.com/advisories/29027

Source: secalert@redhat.com

http://secunia.com/advisories/29048

Source: secalert@redhat.com

http://secunia.com/advisories/29175

Source: secalert@redhat.com

http://secunia.com/advisories/29267

Source: secalert@redhat.com

http://secunia.com/advisories/29282

Source: secalert@redhat.com

http://secunia.com/advisories/30048

Source: secalert@redhat.com

http://secunia.com/advisories/30345

Source: secalert@redhat.com

http://secunia.com/advisories/31326

Source: secalert@redhat.com

http://secunia.com/advisories/32222

Source: secalert@redhat.com

http://secunia.com/advisories/32746

Source: secalert@redhat.com

http://secunia.com/advisories/36096

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200803-24.xml

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200811-05.xml

Source: secalert@redhat.com

http://support.apple.com/kb/HT3216

Source: secalert@redhat.com

http://support.apple.com/kb/HT3757

Source: secalert@redhat.com

http://wiki.rpath.com/Advisories:rPSA-2008-0086

Source: secalert@redhat.com

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0086

Source: secalert@redhat.com

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1499

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:053

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2008/05/02/2

Source: secalert@redhat.com

http://www.php.net/ChangeLog-5.php

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/488927/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/492535/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/27786

Source: secalert@redhat.com

http://www.securityfocus.com/bid/29009

Source: secalert@redhat.com

http://www.securityfocus.com/bid/31681

Source: secalert@redhat.com

http://www.securitytracker.com/id?1022674

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA09-218A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2008/0570

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0592

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1412

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/2268

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/2780

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2009/2172

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=431660

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/40505

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-2223

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-2503

Source: secalert@redhat.com

https://usn.ubuntu.com/581-1/

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00371.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00632.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html

Source: secalert@redhat.com

http://ftp.gnome.org/pub/gnome/sources/glib/2.14/glib-2.14.6.news