CVE-2007-1662

The documents confirm CVE-2007-1662 affects the PCRE library and causes a denial-of-service (crash) by reading past the end of the string when unmatched brackets/parentheses are searched; vulnerable in PCRE prior to 7.3 as described. No specific exploit details or affected products/versions are p...

CVE-2007-2395

Apple QuickTime before 7.3 contains a memory corruption vulnerability in handling image description atoms within movie files, allowing a remote attacker to execute arbitrary code. The CERT/NVD entries confirm a buffer/memory-related issue that can be triggered by a specially crafted QuickTime mov...

CVE-2007-4767

CVE-2007-4767 affects PCRE prior to 7.3, where length computation for \p, \P, and \P{x} sequences can be flawed. This can cause DoS via infinite loops or crashes, and may allow arbitrary code execution. Affected component: PCRE regex engine; root cause: incorrect length calculations for the liste...

CVE-2007-1661

CVE-2007-1661 affects the Perl-Compatible Regular Expression (PCRE) library prior to 7.3, where backtracking can occur when matching certain input bytes against some patterns in non‑UTF‑8 mode, potentially exposing sensitive information or causing a denial of service (crash). The description expl...

CVE-2007-4768

CVE-2007-4768 describes a heap-based buffer overflow in the PCRE library (before 7.3) that can be triggered by a singleton Unicode sequence in a character class in a regex pattern, enabling context-dependent attackers to execute arbitrary code. Connected advisories (e.g., RHSA-2007-1126, Ubuntu U...

CVE-2007-5116

CVE-2007-5116 is a Perl vulnerability in the 5.8 release affecting the Regular Expression Engine (regcomp.c) where a buffer overflow can allow a remote attacker to execute arbitrary code by switching from byte to Unicode in a regex. Public-facing sources in the connected documents (including a VM...

CVE-2007-4676

CVE-2007-4676 is a heap-based buffer overflow in Apple QuickTime prior to 7.3. The vulnerability occurs when parsing PICT images, specifically via malformed elements in the Poly type (0x0070–0x0074) and the PackBitsRgn field (0x0099) opcodes, potentially allowing a remote attacker to execute arbi...

CVE-2007-3751

The connected CERT advisory confirms CVE-2007-3751 affects Apple QuickTime for Java prior to QuickTime 7.3, where untrusted Java applets may gain elevated privileges and allow remote arbitrary code execution. Impact is that a remote, unauthenticated attacker could act with the user’s privileges i...

CVE-2007-4672

Apple QuickTime before 7.3 contains a stack-based buffer overflow in processing PICT images due to an invalid UncompressedQuickTimeData opcode length, allowing remote code execution. Public sources (e.g., SAINT advisories and NVD entry) note the vulnerability exists and recommend upgrading to Qui...

CVE-2007-4675

CVE-2007-4675 summary (Apple QuickTime): A heap-based buffer overflow in the QuickTime VR extension (QTVR) 7.2.0.240, embedded in QuickTime.qts, allows remote code execution when a user opens a specially crafted QTVR movie file. The vulnerability is caused by an unvalidated size field in the pano...

CVE-2007-1659

Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes...

CVE-2007-3750

CVE-2007-3750 : Heap-based buffer overflow in Apple QuickTime prior to 7.3. The flaw occurs when parsing the Sample Table Sample Descriptor (STSD) atom in QuickTime movie files, allowing a remote attacker to execute arbitrary code. Exploitation described as requiring the user to open a crafted Qu...

CVE-2007-4676

Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing 1 Poly type 0x0070 through 0x0074 and 2 PackBitsRgn field 0x0099 opcodes in a PICT image...

CVE-2007-4766

CVE-2007-4766 concerns the PCRE library: multiple integer overflows in PCRE before 7.3 can be exploited via certain backslash escape sequences to cause a denial of service (crash) or arbitrary code execution. Affected component: PCRE. Remediation: update to PCRE 7.3 or later (or apply vendor-supp...

CVE-2007-1660

CVE-2007-1660 : The PCRE library prior to 7.0 has a flaw in calculating sizes for an unspecified set of “multiple forms of character class,” enabling a buffer overflow that can cause a denial of service (crash) and potentially allow arbitrary code execution. OpenVAS/NASL and related advisories re...

CVE-2007-4677

CVE-2007-4677 : A heap-based buffer/boundary overflow in Apple QuickTime prior to 7.3 occurs while parsing the color table atom (CTAB) in QuickTime movie files. The vulnerability stems from an invalid color table size during CTAB RGB value processing, leading to heap corruption and potential arbi...

CVE-2007-1659

Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes...

xpdf security update

CentOS Errata and Security Advisory CESA-2007:1029 Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based viewer...

Important: Red Hat Security Advisory: xpdf security update

Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based viewer for Portable Document Format PDF files. Alin Rad...

Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow

This module exploits a stack buffer overflow in Mercury Mail Transport System 4.51. By sending a specially crafted argument to the AUTH CRAM-MD5 command, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...