NVD

Id
25105  
Name
CVE-2015-3210  
Description
Heap-based buffer overflow in PCRE 8.34 through 8.37 and PCRE2 10.10 allows remote attackers to execute arbitrary code via a crafted regular expression, as demonstrated by /^(?P=B)((?P=B)(?J:(?P<B>c)(?P<B>a(?P=B)))>WGXCREDITS)/, a different vulnerability than CVE-2015-8384.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-12-13  
Modified Date
2016-12-15  
Seq
2015-3210  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
132703 25105 CVE-2015-3210 [oss-security] 20150601 CVE-2015-3210: PCRE Library Heap Overflow Vulnerability  View
132704 25105 CVE-2015-3210 [oss-security] 20151202 Re: Heap Overflow in PCRE  View
132705 25105 CVE-2015-3210 74934  View
132706 25105 CVE-2015-3210 https://bugs.exim.org/show_bug.cgi?id=1636  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64610 JVNDB-2015-007305 PCRE および PCRE2 におけるヒープベースのバッファオーバーフローの脆弱性 PCRE および PCRE2 には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2015-3210 80435 CVE-2015-3210 25105 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007305.html 2015-05-29 2016-12-22 View