CVE-2006-7225

2007-12-0320:46:00

CWE-20

[email protected]

web.nvd.nist.gov

pcre

library

denial of service

vulnerability

cve-2006-7225

nvd

6.1 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.016 Low

EPSS

Percentile

87.4%

JSON

Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to cause a denial of service (error or crash) via a regular expression that involves a “malformed POSIX character class”, as demonstrated via an invalid character after a [[ sequence.

CPENameOperatorVersion
perl:pcreperl pcreeq2.01
perl:pcreperl pcreeq4.0
perl:pcreperl pcreeq5.0
perl:pcreperl pcreeq0.99
perl:pcreperl pcreeq0.94
perl:pcreperl pcreeq4.5
perl:pcreperl pcreeq3.7
perl:pcreperl pcreeq3.6
perl:pcreperl pcreeq3.3
perl:pcreperl pcreeq1.04

CPE	Name	Operator	Version
perl:pcre	perl pcre	eq	2.01
perl:pcre	perl pcre	eq	4.0
perl:pcre	perl pcre	eq	5.0
perl:pcre	perl pcre	eq	0.99
perl:pcre	perl pcre	eq	0.94
perl:pcre	perl pcre	eq	4.5
perl:pcre	perl pcre	eq	3.7
perl:pcre	perl pcre	eq	3.6
perl:pcre	perl pcre	eq	3.3
perl:pcre	perl pcre	eq	1.04