NVD

Id
56080  
Name
CVE-2007-3944  
Description
Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, allow remote attackers to execute arbitrary code via certain JavaScript regular expressions. NOTE: this issue was originally reported only for MobileSafari on the iPhone. NOTE: it is not clear whether this stems from an issue in the original distribution of PCRE, which might already have a separate CVE identifier.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-07-23  
Modified Date
2011-04-07  
Seq
2007-3944  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
285591 56080 CVE-2007-3944 http://docs.info.apple.com/article.html?artnum=306173  View
285592 56080 CVE-2007-3944 http://docs.info.apple.com/article.html?artnum=306174  View
285593 56080 CVE-2007-3944 http://www.nytimes.com/2007/07/23/technology/23iphone.html?_r=1&adxnnl=1&adxnnlx=1185163364-1OTsRJvbylLamj17FY2wnw&oref=slogin  View
285594 56080 CVE-2007-3944 http://www.securityevaluators.com/iphone/  View
285595 56080 CVE-2007-3944 http://www.securityevaluators.com/iphone/exploitingiphone.pdf  View
285596 56080 CVE-2007-3944 25002  View
285597 56080 CVE-2007-3944 1018439  View
285598 56080 CVE-2007-3944 ADV-2007-2730  View
285599 56080 CVE-2007-3944 ADV-2007-2731  View
285600 56080 CVE-2007-3944 iphone-safari-bo(35577)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53699 JVNDB-2007-002391 Apple Safari などの PCRE ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 Apple Safari および iPhone の WebKit の JavaScript エンジンの Perl Compatible Regular Expressions (PCRE) ライブラリには、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-3944 27299 CVE-2007-3944 56080 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002391.html 2007-07-23 2012-06-26 View