CVE-2007-1660 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2007-1660
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-1660

Description: Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/38273 UBUNTU http://www.ubuntulinux.org/support/documentation/usn/usn-547-1 SUSE http://www.novell.com/linux/security/advisories/2007_25_sr.html http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html http://www.novell.com/linux/security/advisories/2007_62_pcre.html ST 1018895 SAID Secunia Advisory: SA28714 Secunia Advisory: SA28658 Secunia Advisory: SA28414 Secunia Advisory: SA28406 Secunia Advisory: SA28136 Secunia Advisory: SA27965 Secunia Advisory: SA27776 Secunia Advisory: SA27862 Secunia Advisory: SA27697 Secunia Advisory: SA27773 Secunia Advisory: SA27741 Secunia Advisory: SA27554 Secunia Advisory: SA27547 Secunia Advisory: SA27543 Secunia Advisory: SA27598 Secunia Advisory: SA27538 Secunia Advisory: SA28720 Secunia Advisory: SA29420 Secunia Advisory: SA29785 Secunia Advisory: SA30155 Secunia Advisory: SA30219 Secunia Advisory: SA31124 Secunia Advisory: SA30106 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0546.html http://www.redhat.com/support/errata/RHSA-2007-1065.html http://www.redhat.com/support/errata/RHSA-2007-0967.html http://www.redhat.com/support/errata/RHSA-2007-0968.html http://www.redhat.com/support/errata/RHSA-2007-1063.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10562 MLIST http://lists.vmware.com/pipermail/security-announce/2008/000014.html http://mail.gnome.org/archives/gtk-devel-list/2007-November/msg00022.html MISC http://bugs.gentoo.org/show_bug.cgi?id=198976 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:213 http://www.mandriva.com/security/advisories?name=MDKSA-2007:212 http://www.mandriva.com/security/advisories?name=MDKSA-2007:211 GENTOO http://security.gentoo.org/glsa/glsa-200801-19.xml http://security.gentoo.org/glsa/glsa-200805-11.xml http://security.gentoo.org/glsa/glsa-200801-18.xml http://security.gentoo.org/glsa/glsa-200801-02.xml http://security.gentoo.org/glsa/glsa-200711-30.xml DEBIAN http://www.debian.org/security/2008/dsa-1570 http://www.debian.org/security/2007/dsa-1399 CONFIRM http://docs.info.apple.com/article.html?artnum=307562 http://support.avaya.com/elmodocs2/security/ASA-2007-488.htm http://docs.info.apple.com/article.html?artnum=307179 CERT http://www.us-cert.gov/cas/techalerts/TA07-352A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/490917/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/483579/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/483357/100/0/threaded BID 26346 APPLE http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability