CVE-2008-0674: Buffer Overflow
Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255.
Other sources
PCRE 7.6 fixed following bug:
1. A character class containing a very large number of characters with codepoints greater than 255 (in UTF-8 mode, of course) caused a buffer overflow.
(http://pcre.org/changelog.txt)
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0674?
CVE-2008-0674 has a high severity rating as it allows remote attackers to execute arbitrary code due to a buffer overflow vulnerability.
How do I fix CVE-2008-0674?
To fix CVE-2008-0674, upgrade PCRE to version 7.6 or later, which addresses the buffer overflow issue.
Which versions of PCRE are affected by CVE-2008-0674?
CVE-2008-0674 affects all versions of PCRE prior to 7.6.
Can CVE-2008-0674 be exploited remotely?
Yes, CVE-2008-0674 can be exploited remotely via specially crafted regular expressions.
What are the potential consequences of CVE-2008-0674?
Exploitation of CVE-2008-0674 could lead to arbitrary code execution, resulting in system compromise.