NVD

Id
988  
Name
CVE-2008-1026  
Description
Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp) in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-04-17  
Modified Date
2016-12-15  
Seq
2008-1026  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
6067 988 CVE-2008-1026 APPLE-SA-2008-07-11  View
6068 988 CVE-2008-1026 APPLE-SA-2008-04-16  View
6069 988 CVE-2008-1026 3815  View
6070 988 CVE-2008-1026 http://support.apple.com/kb/HT1467  View
6071 988 CVE-2008-1026 20080416 ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability  View
6072 988 CVE-2008-1026 28815  View
6073 988 CVE-2008-1026 1019870  View
6074 988 CVE-2008-1026 ADV-2008-1250  View
6075 988 CVE-2008-1026 ADV-2008-2094  View
6076 988 CVE-2008-1026 http://www.zerodayinitiative.com/advisories/ZDI-08-022  View
6077 988 CVE-2008-1026 apple-safari-webkit-pcrecompile-bo(41859)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46012 JVNDB-2008-001322 Apple Webkit の PCRE 正規表現コンパイラにおける整数オーバーフローの脆弱性 Apple WebKit の PCRE コンパイラ (JavaScriptCore/pcre/pcre_compile.cpp) には、正規表現の入れ子になった繰り返しのカウント処理に不備があり、整数オーバーフローの脆弱性が存在します。 CVE-2008-1026 31139 CVE-2008-1026 988 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001322.html 2008-04-17 2008-07-29 View