NVD

Id
65771  
Name
CVE-2006-7228  
Description
Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that involves large (1) min, (2) max, or (3) duplength values that cause an incorrect length calculation and trigger a buffer overflow, a different vulnerability than CVE-2006-7227. NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2007-11-14  
Modified Date
2011-03-07  
Seq
2006-7228  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342458 65771 CVE-2006-7228 http://bugs.gentoo.org/show_bug.cgi?id=198976  View
342459 65771 CVE-2006-7228 SUSE-SA:2008:004  View
342460 65771 CVE-2006-7228 [Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates  View
342461 65771 CVE-2006-7228 [Security-announce] 20080415 VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus  View
342462 65771 CVE-2006-7228 oval:org.mitre.oval:def:10810  View
342463 65771 CVE-2006-7228 http://scary.beasts.org/security/CESA-2007-006.html  View
342464 65771 CVE-2006-7228 GLSA-200711-30  View
342465 65771 CVE-2006-7228 GLSA-200801-02  View
342466 65771 CVE-2006-7228 GLSA-200801-18  View
342467 65771 CVE-2006-7228 GLSA-200801-19  View
342468 65771 CVE-2006-7228 GLSA-200802-10  View
342469 65771 CVE-2006-7228 GLSA-200805-11  View
342470 65771 CVE-2006-7228 http://support.avaya.com/elmodocs2/security/ASA-2007-505.htm  View
342471 65771 CVE-2006-7228 DSA-1570  View
342472 65771 CVE-2006-7228 MDVSA-2008:012  View
342473 65771 CVE-2006-7228 MDVSA-2008:030  View
342474 65771 CVE-2006-7228 SUSE-SA:2007:062  View
342475 65771 CVE-2006-7228 http://www.pcre.org/changelog.txt  View
342476 65771 CVE-2006-7228 RHSA-2007:1059  View
342477 65771 CVE-2006-7228 RHSA-2007:1063  View
342478 65771 CVE-2006-7228 RHSA-2007:1065  View
342479 65771 CVE-2006-7228 RHSA-2007:1068  View
342480 65771 CVE-2006-7228 RHSA-2007:1076  View
342481 65771 CVE-2006-7228 RHSA-2007:1077  View
342482 65771 CVE-2006-7228 RHSA-2008:0546  View
342483 65771 CVE-2006-7228 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates  View
342484 65771 CVE-2006-7228 20080416 VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus  View
342485 65771 CVE-2006-7228 26462  View
342486 65771 CVE-2006-7228 ADV-2008-0637  View
342487 65771 CVE-2006-7228 ADV-2008-1234  View
342488 65771 CVE-2006-7228 https://bugzilla.redhat.com/show_bug.cgi?id=383371  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52306 JVNDB-2007-000996 PCRE における複数の値のチェック不備による整数オーバーフローの脆弱性 Perl-Compatible Regular Expression (PCRE) には、min および max, duplength の値のチェック処理に不備があるために、整数オーバーフローが発生する脆弱性が存在します。 CVE-2006-7228 23330 CVE-2006-7228 65771 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000996.html 2007-11-14 2008-08-11 View