CVE-2007-4768: Buffer Overflow
Published Nov 7, 2007
·Updated
Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized.
Affected Software
3 affected components
PCRE PCRE<=6.1
PCRE PCRE<=7.3
PCRE PCRE<=6.0
Event History
Nov 7, 2007
CVE Published
11:46 PM
Nov 8, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4768?
CVE-2007-4768 is rated as a high severity vulnerability due to the potential for arbitrary code execution.
2
How do I fix CVE-2007-4768?
To fix CVE-2007-4768, update the PCRE library to version 7.4 or later.
3
Which versions of PCRE are affected by CVE-2007-4768?
CVE-2007-4768 affects all versions of PCRE prior to 7.4.
4
Who can exploit CVE-2007-4768?
CVE-2007-4768 can be exploited by context-dependent attackers using specially crafted regex patterns.
5
What kind of attack is possible through CVE-2007-4768?
CVE-2007-4768 allows attackers to execute arbitrary code on vulnerable systems.