NVD

Id
65770  
Name
CVE-2006-7227  
Description
Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to execute arbitrary code via a regular expression containing a large number of named subpatterns (name_count) or long subpattern names (max_name_size), which triggers a buffer overflow. NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2007-11-14  
Modified Date
2010-08-21  
Seq
2006-7227  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342442 65770 CVE-2006-7227 http://bugs.gentoo.org/show_bug.cgi?id=198976  View
342443 65770 CVE-2006-7227 SUSE-SA:2008:004  View
342444 65770 CVE-2006-7227 oval:org.mitre.oval:def:10408  View
342445 65770 CVE-2006-7227 http://scary.beasts.org/security/CESA-2007-006.html  View
342446 65770 CVE-2006-7227 GLSA-200711-30  View
342447 65770 CVE-2006-7227 GLSA-200801-02  View
342448 65770 CVE-2006-7227 GLSA-200801-18  View
342449 65770 CVE-2006-7227 GLSA-200801-19  View
342450 65770 CVE-2006-7227 GLSA-200805-11  View
342451 65770 CVE-2006-7227 http://support.avaya.com/elmodocs2/security/ASA-2007-493.htm  View
342452 65770 CVE-2006-7227 DSA-1570  View
342453 65770 CVE-2006-7227 MDVSA-2008:030  View
342454 65770 CVE-2006-7227 SUSE-SA:2007:062  View
342455 65770 CVE-2006-7227 http://www.pcre.org/changelog.txt  View
342456 65770 CVE-2006-7227 RHSA-2007:1052  View
342457 65770 CVE-2006-7227 26462  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52251 JVNDB-2007-000941 PCRE の name_count および max_name_size における整数オーバーフローの脆弱性 Perl-Compatible Regular Expression (PCRE) の名前付きサブパターン (name_count) およびサブパターン名の長さ (max_name_size) を適切に処理しないため、整数オーバーフローの脆弱性が存在します。 CVE-2006-7227 23329 CVE-2006-7227 65770 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000941.html 2007-11-14 2007-12-25 View