CVE-2007-1661
- State
- Published
- Severity
- Not scored
- Published
- Nov 7, 2007
- Updated
- Aug 7, 2024
- Reserved
- Mar 24, 2007
Description
Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes against some regex patterns in non-UTF-8 mode, which allows context-dependent attackers to obtain sensitive information or cause a denial of service (crash), as demonstrated by the "\X?\d" and "\P{L}?\d" patterns.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 30219third-party-advisory
- 29267third-party-advisory
- USN-547-1vendor-advisory
- GLSA-200711-30vendor-advisory
- ADV-2007-4238vdb-entry
- 20071106 rPSA-2007-0231-1 pcremailing-list
- TA07-352Athird-party-advisory
- 27538third-party-advisory
- 20071112 FLEA-2007-0064-1 pcremailing-list
- 28136third-party-advisory
- DSA-1570vendor-advisory
- https://issues.rpath.com/browse/RPL-1738
- 27773third-party-advisory
- 27697third-party-advisory
- 28406third-party-advisory
- 27554third-party-advisory
- ADV-2008-0924vdb-entry
- pcre-nonutf8-dos(38274)vdb-entry
- 27543third-party-advisory
- [gtk-devel-list] 20071107 GLib 2.14.3mailing-list
- 29420third-party-advisory
- APPLE-SA-2007-12-17vendor-advisory
- GLSA-200805-11vendor-advisory
- APPLE-SA-2008-03-18vendor-advisory
- MDKSA-2007:211vendor-advisory
- FEDORA-2008-1842vendor-advisory
- http://docs.info.apple.com/article.html?artnum=307179
- 27741third-party-advisory
- ADV-2007-3790vdb-entry
- ADV-2007-3725vdb-entry
- SUSE-SA:2007:062vendor-advisory
- http://www.pcre.org/changelog.txt
- http://docs.info.apple.com/article.html?artnum=307562
- 30155third-party-advisory
- 28720third-party-advisory
- GLSA-200801-02vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=198976
- GLSA-200801-19vendor-advisory
- GLSA-200801-18vendor-advisory
- DSA-1399vendor-advisory
- 28414third-party-advisory
- 26346vdb-entry
- 30106third-party-advisory
- 28714third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.