CVE-2007-1659: Buffer Overflow
Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1659?
CVE-2007-1659 is classified as a vulnerability that can lead to denial of service and potentially arbitrary code execution.
How do I fix CVE-2007-1659?
To fix CVE-2007-1659, upgrade the PCRE library to version 7.3 or later.
Who is affected by CVE-2007-1659?
CVE-2007-1659 affects users of the Perl-Compatible Regular Expression (PCRE) library versions prior to 7.3.
What type of attack does CVE-2007-1659 facilitate?
CVE-2007-1659 facilitates context-dependent attacks that can crash applications using the vulnerable PCRE library.
Are there any known exploits for CVE-2007-1659?
Yes, there are known exploits that demonstrate how to crash applications or potentially execute arbitrary code using malformed regex patterns.