CVE-2007-4768
- State
- Published
- Severity
- Not scored
- Published
- Nov 7, 2007
- Updated
- Aug 7, 2024
- Reserved
- Sep 10, 2007
Description
Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 30219third-party-advisory
- SUSE-SA:2007:069vendor-advisory
- 29267third-party-advisory
- USN-547-1vendor-advisory
- GLSA-200711-30vendor-advisory
- 28157third-party-advisory
- oval:org.mitre.oval:def:9701vdb-entrysignature
- ADV-2007-4238vdb-entry
- 30507third-party-advisory
- 20071106 rPSA-2007-0231-1 pcremailing-list
- TA07-352Athird-party-advisory
- 27538third-party-advisory
- 20071112 FLEA-2007-0064-1 pcremailing-list
- http://www.adobe.com/support/security/bulletins/apsb08-13.html
- 28570third-party-advisory
- 28136third-party-advisory
- ADV-2008-1966vdb-entry
- DSA-1570vendor-advisory
- ADV-2008-1724vdb-entry
- https://issues.rpath.com/browse/RPL-1738
- TA07-355Athird-party-advisory
- 27697third-party-advisory
- 28406third-party-advisory
- 27554third-party-advisory
- ADV-2008-0924vdb-entry
- GLSA-200801-07vendor-advisory
- 27543third-party-advisory
- [gtk-devel-list] 20071107 GLib 2.14.3mailing-list
- 29420third-party-advisory
- APPLE-SA-2007-12-17vendor-advisory
- GLSA-200805-11vendor-advisory
- APPLE-SA-2008-03-18vendor-advisory
- MDKSA-2007:211vendor-advisory
- 239286vendor-advisory
- FEDORA-2008-1842vendor-advisory
- 28161third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307179
- RHSA-2007:1126vendor-advisory
- 27741third-party-advisory
- ADV-2007-3790vdb-entry
- 30840third-party-advisory
- ADV-2007-3725vdb-entry
- 238305vendor-advisory
- ADV-2007-4258vdb-entry
- 1019116vdb-entry
- http://docs.info.apple.com/article.html?artnum=307562
- 30155third-party-advisory
- 28720third-party-advisory
- GLSA-200801-02vendor-advisory
- pcre-class-unicode-bo(38278)vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=198976
- 28213third-party-advisory
- GLSA-200801-19vendor-advisory
- GLSA-200801-18vendor-advisory
- http://www.adobe.com/support/security/bulletins/apsb07-20.html
- DSA-1399vendor-advisory
- 28414third-party-advisory
- 26346vdb-entry
- 30106third-party-advisory
- 28714third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.