CVE-2007-4768

: pcre before 7.3 incorrect unicode in char class optimization

Published Nov 7, 2007 CVSS 2.0 · 6.8 Medium EPSS 4.1% KEV · Not listed
Description
Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1399-1 New pcre3 packages fix arbitrary code execution
Debian DSA Debian DSA DSA-1570-1 New kazehakase packages fix execution of arbitrary code
Ubuntu USN Ubuntu USN USN-547-1 PCRE vulnerabilities
References
Link Providers
http://bugs.gentoo.org/show_bug.cgi?id=198976 cve-icon cve-icon
http://docs.info.apple.com/article.html?artnum=307179 cve-icon cve-icon
http://docs.info.apple.com/article.html?artnum=307562 cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html cve-icon cve-icon
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html cve-icon cve-icon
http://mail.gnome.org/archives/gtk-devel-list/2007-November/msg00022.html cve-icon cve-icon
http://secunia.com/advisories/27538 cve-icon cve-icon
http://secunia.com/advisories/27543 cve-icon cve-icon
http://secunia.com/advisories/27554 cve-icon cve-icon
http://secunia.com/advisories/27697 cve-icon cve-icon
http://secunia.com/advisories/27741 cve-icon cve-icon
http://secunia.com/advisories/28136 cve-icon cve-icon
http://secunia.com/advisories/28157 cve-icon cve-icon
http://secunia.com/advisories/28161 cve-icon cve-icon
http://secunia.com/advisories/28213 cve-icon cve-icon
http://secunia.com/advisories/28406 cve-icon cve-icon
http://secunia.com/advisories/28414 cve-icon cve-icon
http://secunia.com/advisories/28570 cve-icon cve-icon
http://secunia.com/advisories/28714 cve-icon cve-icon
http://secunia.com/advisories/28720 cve-icon cve-icon
http://secunia.com/advisories/29267 cve-icon cve-icon
http://secunia.com/advisories/29420 cve-icon cve-icon
http://secunia.com/advisories/30106 cve-icon cve-icon
http://secunia.com/advisories/30155 cve-icon cve-icon
http://secunia.com/advisories/30219 cve-icon cve-icon
http://secunia.com/advisories/30507 cve-icon cve-icon
http://secunia.com/advisories/30840 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200711-30.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200801-02.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200801-18.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200801-19.xml cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200805-11.xml cve-icon cve-icon
http://securitytracker.com/id?1019116 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-239286-1 cve-icon cve-icon
http://www.adobe.com/support/security/bulletins/apsb07-20.html cve-icon cve-icon
http://www.adobe.com/support/security/bulletins/apsb08-13.html cve-icon cve-icon
http://www.debian.org/security/2007/dsa-1399 cve-icon cve-icon
http://www.debian.org/security/2008/dsa-1570 cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDKSA-2007:211 cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-1126.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/483357/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/483579/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/26346 cve-icon cve-icon
http://www.us-cert.gov/cas/techalerts/TA07-352A.html cve-icon cve-icon
http://www.us-cert.gov/cas/techalerts/TA07-355A.html cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3725 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3790 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/4238 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/4258 cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/0924/references cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/1724/references cve-icon cve-icon
http://www.vupen.com/english/advisories/2008/1966/references cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/38278 cve-icon cve-icon
https://issues.rpath.com/browse/RPL-1738 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2007-4768 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9701 cve-icon cve-icon
https://usn.ubuntu.com/547-1/ cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2007-4768 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 3:08 PM
Reserved
Sep 10, 2007, 12:00 AM
Status
Modified
Published
Nov 7, 2007, 11:46 PM
Modified
Jun 16, 2026, 10:44 PM
Severity
Important
Public date
Nov 5, 2007, 12:00 AM