CVE-2007-4767: Medium severity PCRE PCRE vulnerability
Published Nov 7, 2007
·Updated
Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length of (1) a \p sequence, (2) a \P sequence, or (3) a \P{x} sequence, which allows context-dependent attackers to cause a denial of service (infinite loop or crash) or execute arbitrary code.
Affected Software
3 affected components
PCRE PCRE<=6.0
PCRE PCRE<=6.1
PCRE PCRE<=7.3
Event History
Nov 7, 2007
CVE Published
11:46 PM
Nov 8, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4767?
CVE-2007-4767 has a severity rating that allows for potential denial of service or arbitrary code execution.
2
How do I fix CVE-2007-4767?
To fix CVE-2007-4767, upgrade the PCRE library to version 7.4 or later.
3
What causes the vulnerability CVE-2007-4767?
CVE-2007-4767 is caused by improper length computations in PCRE sequences that can lead to infinite loops or crashes.
4
Is CVE-2007-4767 present in all PCRE versions?
CVE-2007-4767 affects PCRE library versions prior to 7.4.
5
Can CVE-2007-4767 be exploited remotely?
Yes, CVE-2007-4767 can be exploited by context-dependent attackers, possibly resulting in remote exploits.