CVE-2007-4771
- State
- Published
- Severity
- Not scored
- Published
- Jan 28, 2008
- Updated
- Aug 7, 2024
- Reserved
- Sep 10, 2007
Description
Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers to cause a denial of service (memory consumption) and possibly have unspecified other impact via a regular expression that writes a large amount of data to the backtracking stack. NOTE: some of these details are obtained from third party information.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- libicu-dointerval-bo(39936)vdb-entry
- 233922vendor-advisory
- 28615third-party-advisory
- 29852third-party-advisory
- 28783third-party-advisory
- 29291third-party-advisory
- SUSE-SA:2008:023vendor-advisory
- 29242third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=429025
- 1019269vdb-entry
- GLSA-200805-16vendor-advisory
- 29987third-party-advisory
- SUSE-SR:2008:005vendor-advisory
- 27455vdb-entry
- oval:org.mitre.oval:def:10507vdb-entrysignature
- 29294third-party-advisory
- http://www.openoffice.org/security/cves/CVE-2007-4770.html
- GLSA-200803-20vendor-advisory
- DSA-1511vendor-advisory
- oval:org.mitre.oval:def:5431vdb-entrysignature
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0043
- RHSA-2008:0090vendor-advisory
- 29333third-party-advisory
- https://issues.rpath.com/browse/RPL-2199
- USN-591-1vendor-advisory
- MDVSA-2008:026vendor-advisory
- 231641vendor-advisory
- ADV-2008-1375vdb-entry
- 29194third-party-advisory
- 30179third-party-advisory
- FEDORA-2008-1076vendor-advisory
- http://www.openoffice.org/security/cves/CVE-2007-5745.html
- 28575third-party-advisory
- 20080206 rPSA-2008-0043-1 icumailing-list
- [icu-support] 20080122 ICU Patch for bugs in Regular Expressionsmailing-list
- 28669third-party-advisory
- ADV-2008-0807vdb-entry
- 29910third-party-advisory
- FEDORA-2008-1036vendor-advisory
- ADV-2008-0282vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.