CVE-2007-4766

: pcre < 7.3 integer overflows

Published Nov 7, 2007 CVSS 2.0 · 7.5 High EPSS 4.2% KEV · Not listed
Description
Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via unspecified escape (backslash) sequences.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1399-1 New pcre3 packages fix arbitrary code execution
Debian DSA Debian DSA DSA-1570-1 New kazehakase packages fix execution of arbitrary code
EUVD EUVD EUVD-2007-4747 Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via unspecified escape (backslash) sequences.
Ubuntu USN Ubuntu USN USN-547-1 PCRE vulnerabilities
References
Link Providers
http://bugs.gentoo.org/show_bug.cgi?id=198976 cve-icon cve-icon
http://docs.info.apple.com/article.html?artnum=307179 cve-icon cve-icon
http://docs.info.apple.com/article.html?artnum=307562 cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html cve-icon cve-icon
http://mail.gnome.org/archives/gtk-devel-list/2007-November/msg00022.html cve-icon cve-icon
http://secunia.com/advisories/27538 cve-icon cve-icon
http://secunia.com/advisories/27543 cve-icon cve-icon
http://secunia.com/advisories/27554 cve-icon cve-icon
http://secunia.com/advisories/27697 cve-icon cve-icon
http://secunia.com/advisories/27741 cve-icon cve-icon
http://secunia.com/advisories/27773 cve-icon cve-icon
http://secunia.com/advisories/28136 cve-icon cve-icon
http://secunia.com/advisories/28406 cve-icon cve-icon
http://secunia.com/advisories/28414 cve-icon cve-icon
http://secunia.com/advisories/28714 cve-icon cve-icon
http://secunia.com/advisories/28720 cve-icon cve-icon
http://secunia.com/advisories/29267 cve-icon cve-icon
http://secunia.com/advisories/29420 cve-icon cve-icon
http://secunia.com/advisories/30106 cve-icon cve-icon
http://secunia.com/advisories/30155 cve-icon cve-icon
http://secunia.com/advisories/30219 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200711-30.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200801-02.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200801-18.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200801-19.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200805-11.xml cve-icon cve-icon
http://www.debian.org/security/2007/dsa-1399 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1570 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDKSA-2007:211 cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2007_62_pcre.html cve-icon cve-icon
http://www.pcre.org/changelog.txt cve-icon cve-icon
http://www.securityfocus.com/archive/1/483357/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/483579/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/26346 cve-icon cve-icon
http://www.us-cert.gov/cas/techalerts/TA07-352A.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3725 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3790 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/4238 cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/0924/references cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/38276 cve-icon cve-icon
https://issues.rpath.com/browse/RPL-1738 cve-icon cve-icon
https://usn.ubuntu.com/547-1/ cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2007-4766 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html cve-icon cve-icon
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 3:08 PM
Reserved
Sep 10, 2007, 12:00 AM
Status
Modified
Published
Nov 7, 2007, 11:46 PM
Modified
Jun 16, 2026, 10:44 PM
Severity
Important
Public date
Nov 5, 2007, 12:00 AM