CVE-2005-2491: Buffer Overflow
Integer overflow in pcrecompile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2491?
CVE-2005-2491 is considered high severity due to its potential for arbitrary code execution through a heap-based buffer overflow.
How do I fix CVE-2005-2491?
To fix CVE-2005-2491, you should upgrade to PCRE version 6.2 or later, where the vulnerability is resolved.
What products are affected by CVE-2005-2491?
CVE-2005-2491 affects various products, including Python, Ethereal, and PHP that utilize vulnerable versions of PCRE.
How does CVE-2005-2491 allow an attacker to exploit systems?
CVE-2005-2491 allows an attacker to exploit systems by using specially crafted regular expressions with quantifier values that trigger the integer overflow.
Who is impacted by CVE-2005-2491?
Individuals and organizations using affected versions of PCRE in their applications are impacted by CVE-2005-2491.