NVD

Id
53845  
Name
CVE-2007-1661  
Description
Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes against some regex patterns in non-UTF-8 mode, which allows context-dependent attackers to obtain sensitive information or cause a denial of service (crash), as demonstrated by the "X?d" and "P{L}?d" patterns.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-11-07  
Modified Date
2013-08-19  
Seq
2007-1661  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
272921 53845 CVE-2007-1661 http://bugs.gentoo.org/show_bug.cgi?id=198976  View
272922 53845 CVE-2007-1661 http://docs.info.apple.com/article.html?artnum=307179  View
272923 53845 CVE-2007-1661 http://docs.info.apple.com/article.html?artnum=307562  View
272924 53845 CVE-2007-1661 APPLE-SA-2007-12-17  View
272925 53845 CVE-2007-1661 APPLE-SA-2008-03-18  View
272926 53845 CVE-2007-1661 [gtk-devel-list] 20071107 GLib 2.14.3  View
272927 53845 CVE-2007-1661 GLSA-200711-30  View
272928 53845 CVE-2007-1661 GLSA-200801-02  View
272929 53845 CVE-2007-1661 GLSA-200801-18  View
272930 53845 CVE-2007-1661 GLSA-200801-19  View
272931 53845 CVE-2007-1661 GLSA-200805-11  View
272932 53845 CVE-2007-1661 DSA-1399  View
272933 53845 CVE-2007-1661 DSA-1570  View
272934 53845 CVE-2007-1661 MDKSA-2007:211  View
272935 53845 CVE-2007-1661 SUSE-SA:2007:062  View
272936 53845 CVE-2007-1661 http://www.pcre.org/changelog.txt  View
272937 53845 CVE-2007-1661 20071106 rPSA-2007-0231-1 pcre  View
272938 53845 CVE-2007-1661 20071112 FLEA-2007-0064-1 pcre  View
272939 53845 CVE-2007-1661 26346  View
272940 53845 CVE-2007-1661 USN-547-1  View
272941 53845 CVE-2007-1661 TA07-352A  View
272942 53845 CVE-2007-1661 ADV-2007-3725  View
272943 53845 CVE-2007-1661 ADV-2007-3790  View
272944 53845 CVE-2007-1661 ADV-2007-4238  View
272945 53845 CVE-2007-1661 ADV-2008-0924  View
272946 53845 CVE-2007-1661 pcre-nonutf8-dos(38274)  View
272947 53845 CVE-2007-1661 https://issues.rpath.com/browse/RPL-1738  View
272948 53845 CVE-2007-1661 FEDORA-2008-1842  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52374 JVNDB-2007-001064 PCRE ライブラリにおける UTF-8 以外の正規表現の取り扱いに関するサービス運用妨害 (DoS) の脆弱性 Perl-Compatible Regular Expression (PCRE) ライブラリには、UTF-8 以外のモードで正規表現の文字列を処理する際、先頭より余分に戻って読み込みをするため、重要な情報が漏えいする、もしくはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-1661 25016 CVE-2007-1661 53845 6.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001064.html 2007-11-07 2008-04-01 View