CVE-2007-1660: Buffer Overflow
Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.
Other sources
Tavis Ormandy of the Google Security Team reported multiple pcre regular expressions flaws. Here are the details pasted from Tavis' mail:
CVE-2007-1660: multiple forms of character class had their sizes miscalculated on initial passes, resulting in too little memory being allocated, this was also inadvertently fixed in version 7.0, where the compile phase was entirely re-engineered (and much improved, from a security standpoint).
Acknowledgements:
Red Hat would like to thank Tavis Ormandy and Will Drewry for properly disclosing these issues.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1660?
CVE-2007-1660 is classified as a high severity vulnerability due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2007-1660?
To fix CVE-2007-1660, upgrade the PCRE library to version 7.0 or later.
What causes CVE-2007-1660?
CVE-2007-1660 is caused by the PCRE library's improper calculation of sizes for unspecified multiple forms of character class.
What types of attacks can exploit CVE-2007-1660?
Attackers can exploit CVE-2007-1660 to trigger buffer overflow vulnerabilities, potentially leading to crashes and arbitrary code execution.
Which versions of PCRE are affected by CVE-2007-1660?
CVE-2007-1660 affects PCRE library versions prior to 7.0.