CVE-2005-4872: Integer Overflow
CVE-2006-7224 initially described several integer overflows in pcre, all described here: http://scary.beasts.org/security/CESA-2007-006.html
This id should be used to describe issue #2 in that advisory:
2) Uncharacterized crash researching item #1 above: Demo:
(?P<0>)(?P<1>)...fill in this sequence...(?P<3999>)
This does not trigger the integer overflow present in #1 above, but still crashes with a serious-looking memory error of some kind - possibly a buffer overflow.
Other sources
Perl-Compatible Regular Expression (PCRE) library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service (crash) via a regular expression with a large number of named subpatterns, which triggers a buffer overflow. NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4872?
CVE-2005-4872 is classified as a moderate severity vulnerability due to potential integer overflow issues in the PCRE library.
How do I fix CVE-2005-4872?
To fix CVE-2005-4872, upgrade to a fixed version of the pcre package, specifically versions greater than 4.5-4.el4_5.4 or 6.6-2.el5_1.1.
What software is affected by CVE-2005-4872?
CVE-2005-4872 affects the pcre package, particularly versions up to 4.5-4.el4_5.4 and 6.6-2.el5_1.1.
What vulnerabilities does CVE-2005-4872 relate to?
CVE-2005-4872 is associated with multiple integer overflow vulnerabilities in the PCRE library, as initially described.
Is CVE-2005-4872 still a threat to current systems?
CVE-2005-4872 may still pose a threat to systems that have not been updated to secure versions of the PCRE library.