CVE-2007-1661: Medium severity PCRE Perl-compatible Regular Expression Library vulnerability
Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes against some regex patterns in non-UTF-8 mode, which allows context-dependent attackers to obtain sensitive information or cause a denial of service (crash), as demonstrated by the "\X?\d" and "\P{L}?\d" patterns.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1661?
CVE-2007-1661 is considered a medium severity vulnerability due to the potential for denial of service and information disclosure.
How do I fix CVE-2007-1661?
To fix CVE-2007-1661, upgrade the PCRE library to version 7.3 or later.
Which software is affected by CVE-2007-1661?
CVE-2007-1661 affects versions of the Perl-Compatible Regular Expression library prior to 7.3 and certain versions of macOS and Mac OS X Server.
What type of attacks can be executed using CVE-2007-1661?
CVE-2007-1661 can allow context-dependent attackers to cause a denial of service or potentially access sensitive information.
Is CVE-2007-1661 specific to any programming language?
CVE-2007-1661 is related to the Perl-Compatible Regular Expression library, which is used in multiple programming languages, particularly those that utilize regex functions.