CVE-2008-0674

Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255.
References
Link Resource
http://ftp.gnome.org/pub/gnome/sources/glib/2.14/glib-2.14.6.news
http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html
http://pcre.org/changelog.txt
http://secunia.com/advisories/28923
http://secunia.com/advisories/28957
http://secunia.com/advisories/28960
http://secunia.com/advisories/28985
http://secunia.com/advisories/28996
http://secunia.com/advisories/29027
http://secunia.com/advisories/29048
http://secunia.com/advisories/29175
http://secunia.com/advisories/29267
http://secunia.com/advisories/29282
http://secunia.com/advisories/30048
http://secunia.com/advisories/30345
http://secunia.com/advisories/31326
http://secunia.com/advisories/32222
http://secunia.com/advisories/32746
http://secunia.com/advisories/36096
http://security.gentoo.org/glsa/glsa-200803-24.xml
http://security.gentoo.org/glsa/glsa-200811-05.xml
http://support.apple.com/kb/HT3216
http://support.apple.com/kb/HT3757
http://wiki.rpath.com/Advisories:rPSA-2008-0086
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0086
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176
http://www.debian.org/security/2008/dsa-1499
http://www.mandriva.com/security/advisories?name=MDVSA-2008:053
http://www.openwall.com/lists/oss-security/2008/05/02/2
http://www.php.net/ChangeLog-5.php
http://www.securityfocus.com/archive/1/488927/100/0/threaded
http://www.securityfocus.com/archive/1/492535/100/0/threaded
http://www.securityfocus.com/bid/27786
http://www.securityfocus.com/bid/29009
http://www.securityfocus.com/bid/31681
http://www.securitytracker.com/id?1022674
http://www.us-cert.gov/cas/techalerts/TA09-218A.html US Government Resource
http://www.vupen.com/english/advisories/2008/0570
http://www.vupen.com/english/advisories/2008/0592
http://www.vupen.com/english/advisories/2008/1412
http://www.vupen.com/english/advisories/2008/2268
http://www.vupen.com/english/advisories/2008/2780
http://www.vupen.com/english/advisories/2009/2172
https://bugzilla.redhat.com/show_bug.cgi?id=431660
https://exchange.xforce.ibmcloud.com/vulnerabilities/40505
https://issues.rpath.com/browse/RPL-2223
https://issues.rpath.com/browse/RPL-2503
https://usn.ubuntu.com/581-1/
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00371.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00632.html
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html
http://ftp.gnome.org/pub/gnome/sources/glib/2.14/glib-2.14.6.news
http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html
http://pcre.org/changelog.txt
http://secunia.com/advisories/28923
http://secunia.com/advisories/28957
http://secunia.com/advisories/28960
http://secunia.com/advisories/28985
http://secunia.com/advisories/28996
http://secunia.com/advisories/29027
http://secunia.com/advisories/29048
http://secunia.com/advisories/29175
http://secunia.com/advisories/29267
http://secunia.com/advisories/29282
http://secunia.com/advisories/30048
http://secunia.com/advisories/30345
http://secunia.com/advisories/31326
http://secunia.com/advisories/32222
http://secunia.com/advisories/32746
http://secunia.com/advisories/36096
http://security.gentoo.org/glsa/glsa-200803-24.xml
http://security.gentoo.org/glsa/glsa-200811-05.xml
http://support.apple.com/kb/HT3216
http://support.apple.com/kb/HT3757
http://wiki.rpath.com/Advisories:rPSA-2008-0086
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0086
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176
http://www.debian.org/security/2008/dsa-1499
http://www.mandriva.com/security/advisories?name=MDVSA-2008:053
http://www.openwall.com/lists/oss-security/2008/05/02/2
http://www.php.net/ChangeLog-5.php
http://www.securityfocus.com/archive/1/488927/100/0/threaded
http://www.securityfocus.com/archive/1/492535/100/0/threaded
http://www.securityfocus.com/bid/27786
http://www.securityfocus.com/bid/29009
http://www.securityfocus.com/bid/31681
http://www.securitytracker.com/id?1022674
http://www.us-cert.gov/cas/techalerts/TA09-218A.html US Government Resource
http://www.vupen.com/english/advisories/2008/0570
http://www.vupen.com/english/advisories/2008/0592
http://www.vupen.com/english/advisories/2008/1412
http://www.vupen.com/english/advisories/2008/2268
http://www.vupen.com/english/advisories/2008/2780
http://www.vupen.com/english/advisories/2009/2172
https://bugzilla.redhat.com/show_bug.cgi?id=431660
https://exchange.xforce.ibmcloud.com/vulnerabilities/40505
https://issues.rpath.com/browse/RPL-2223
https://issues.rpath.com/browse/RPL-2503
https://usn.ubuntu.com/581-1/
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00371.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00632.html
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html
Configurations

Configuration 1 (hide)

cpe:2.3:a:pcre:pcre:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:42

Type Values Removed Values Added
References () http://ftp.gnome.org/pub/gnome/sources/glib/2.14/glib-2.14.6.news - () http://ftp.gnome.org/pub/gnome/sources/glib/2.14/glib-2.14.6.news -
References () http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html - () http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html -
References () http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html - () http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html -
References () http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html - () http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html -
References () http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html - () http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html -
References () http://pcre.org/changelog.txt - () http://pcre.org/changelog.txt -
References () http://secunia.com/advisories/28923 - () http://secunia.com/advisories/28923 -
References () http://secunia.com/advisories/28957 - () http://secunia.com/advisories/28957 -
References () http://secunia.com/advisories/28960 - () http://secunia.com/advisories/28960 -
References () http://secunia.com/advisories/28985 - () http://secunia.com/advisories/28985 -
References () http://secunia.com/advisories/28996 - () http://secunia.com/advisories/28996 -
References () http://secunia.com/advisories/29027 - () http://secunia.com/advisories/29027 -
References () http://secunia.com/advisories/29048 - () http://secunia.com/advisories/29048 -
References () http://secunia.com/advisories/29175 - () http://secunia.com/advisories/29175 -
References () http://secunia.com/advisories/29267 - () http://secunia.com/advisories/29267 -
References () http://secunia.com/advisories/29282 - () http://secunia.com/advisories/29282 -
References () http://secunia.com/advisories/30048 - () http://secunia.com/advisories/30048 -
References () http://secunia.com/advisories/30345 - () http://secunia.com/advisories/30345 -
References () http://secunia.com/advisories/31326 - () http://secunia.com/advisories/31326 -
References () http://secunia.com/advisories/32222 - () http://secunia.com/advisories/32222 -
References () http://secunia.com/advisories/32746 - () http://secunia.com/advisories/32746 -
References () http://secunia.com/advisories/36096 - () http://secunia.com/advisories/36096 -
References () http://security.gentoo.org/glsa/glsa-200803-24.xml - () http://security.gentoo.org/glsa/glsa-200803-24.xml -
References () http://security.gentoo.org/glsa/glsa-200811-05.xml - () http://security.gentoo.org/glsa/glsa-200811-05.xml -
References () http://support.apple.com/kb/HT3216 - () http://support.apple.com/kb/HT3216 -
References () http://support.apple.com/kb/HT3757 - () http://support.apple.com/kb/HT3757 -
References () http://wiki.rpath.com/Advisories:rPSA-2008-0086 - () http://wiki.rpath.com/Advisories:rPSA-2008-0086 -
References () http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0086 - () http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0086 -
References () http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176 - () http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176 -
References () http://www.debian.org/security/2008/dsa-1499 - () http://www.debian.org/security/2008/dsa-1499 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2008:053 - () http://www.mandriva.com/security/advisories?name=MDVSA-2008:053 -
References () http://www.openwall.com/lists/oss-security/2008/05/02/2 - () http://www.openwall.com/lists/oss-security/2008/05/02/2 -
References () http://www.php.net/ChangeLog-5.php - () http://www.php.net/ChangeLog-5.php -
References () http://www.securityfocus.com/archive/1/488927/100/0/threaded - () http://www.securityfocus.com/archive/1/488927/100/0/threaded -
References () http://www.securityfocus.com/archive/1/492535/100/0/threaded - () http://www.securityfocus.com/archive/1/492535/100/0/threaded -
References () http://www.securityfocus.com/bid/27786 - () http://www.securityfocus.com/bid/27786 -
References () http://www.securityfocus.com/bid/29009 - () http://www.securityfocus.com/bid/29009 -
References () http://www.securityfocus.com/bid/31681 - () http://www.securityfocus.com/bid/31681 -
References () http://www.securitytracker.com/id?1022674 - () http://www.securitytracker.com/id?1022674 -
References () http://www.us-cert.gov/cas/techalerts/TA09-218A.html - US Government Resource () http://www.us-cert.gov/cas/techalerts/TA09-218A.html - US Government Resource
References () http://www.vupen.com/english/advisories/2008/0570 - () http://www.vupen.com/english/advisories/2008/0570 -
References () http://www.vupen.com/english/advisories/2008/0592 - () http://www.vupen.com/english/advisories/2008/0592 -
References () http://www.vupen.com/english/advisories/2008/1412 - () http://www.vupen.com/english/advisories/2008/1412 -
References () http://www.vupen.com/english/advisories/2008/2268 - () http://www.vupen.com/english/advisories/2008/2268 -
References () http://www.vupen.com/english/advisories/2008/2780 - () http://www.vupen.com/english/advisories/2008/2780 -
References () http://www.vupen.com/english/advisories/2009/2172 - () http://www.vupen.com/english/advisories/2009/2172 -
References () https://bugzilla.redhat.com/show_bug.cgi?id=431660 - () https://bugzilla.redhat.com/show_bug.cgi?id=431660 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/40505 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/40505 -
References () https://issues.rpath.com/browse/RPL-2223 - () https://issues.rpath.com/browse/RPL-2223 -
References () https://issues.rpath.com/browse/RPL-2503 - () https://issues.rpath.com/browse/RPL-2503 -
References () https://usn.ubuntu.com/581-1/ - () https://usn.ubuntu.com/581-1/ -
References () https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00371.html - () https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00371.html -
References () https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00632.html - () https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00632.html -
References () https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html - () https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html -

Information

Published : 2008-02-18 23:00

Updated : 2024-11-21 00:42


NVD link : CVE-2008-0674

Mitre link : CVE-2008-0674

CVE.ORG link : CVE-2008-0674


JSON object : View

Products Affected

pcre

  • pcre
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer