[SECURITY] Fedora 9 Update: pcre-7.3-4.fc9

Perl-compatible regular expression library. PCRE has its own native API, but a set of "wrapper" functions that are base d on the POSIX API are also supplied in the library libpcreposix. Note that this just provides a POSIX calling interface to PCRE: the regular expressions themselves still follow...

GLSA-200805-11 : Chicken: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200805-11 Chicken: Multiple vulnerabilities Chicken includes a copy of PCRE which is vulnerable to multiple buffer overflows and memory corruption vulnerabilities GLSA 200711-30. Impact : An attacker could entice a user to process...

Debian: Security Advisory (DSA-1570-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1570-1 (kazehakase)

The remote host is missing an update to kazehakase announced via advisory DSA 1570-1. OpenVAS Vulnerability Test $Id: deb15701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1570-1 kazehakase Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Chicken: Multiple vulnerabilities

Background Chicken is a Scheme interpreter and native Scheme to C compiler. Description Chicken includes a copy of PCRE which is vulnerable to multiple buffer overflows and memory corruption vulnerabilities GLSA 200711-30. Impact An attacker could entice a user to process specially crafted regula...

Debian DSA-1570-1 : kazehakase - various

Andrews Salomon reported that kazehakase, a GTK+-based web browser that allows pluggable rendering engines, contained an embedded copy of the PCRE library in its source tree which was compiled in and used in preference to the system-wide version of this library. The PCRE library has been updated ...

PHP 5.2.6修复多个安全漏洞

BUGTRAQ ID: 29009 CVECAN ID: CVE-2008-0599 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的5.2.6之前版本存在多个安全漏洞，允许恶意用户绕过安全限制、导致拒绝服务或入侵有漏洞的系统。 1 FastCGI SAPI中的安全漏洞可能导致栈溢出。 2 处理escapeshellcmd中不完整多字节字符时存在安全漏洞。 3 cURL中的错误可能导致绕过safemode限制。 4 PCRE中的边界条件错误可能允许恶意用户导致拒绝服务或入侵有漏洞的系统。 PHP 5.2.6 PHP ---...

[SECURITY] [DSA 1570-1] New kazehakase packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1570-1 [email protected] http://www.debian.org/security/ Steve Kemp May 06, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

DSA-1570-1 kazehakase - execution of arbitrary code

Bulletin has no description...

PHP < 5.2.6 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is older than 5.2.6. Such versions may be affected by the following issues : - A stack-based buffer overflow in FastCGI SAPI. - An integer overflow in printf. - An security issue arising from improper calculation of the leng...

CVE-2008-1026

Integer overflow in the PCRE regular expression compiler JavaScriptCore/pcre/pcrecompile.cpp in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflo...

Integer overflow

Integer overflow in the PCRE regular expression compiler JavaScriptCore/pcre/pcrecompile.cpp in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflo...

CVE-2008-1026

Integer overflow in the PCRE regular expression compiler JavaScriptCore/pcre/pcrecompile.cpp in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflo...

CVE-2008-1026

Removed by vendor...

CVE-2008-1026

Integer overflow in the PCRE regular expression compiler JavaScriptCore/pcre/pcrecompile.cpp in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflo...

CVE-2008-1026

In Safari (WebKit), CVE-2008-1026 is a heap-based buffer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp). The issue occurs when a regular expression contains large, nested repetition counts, allowing remote attackers to trigger code execution. Affected prod...

ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability

ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-022 April 16, 2008 -- CVE ID: CVE-2008-1026 -- Affected Vendors: Apple -- Affected Products: Apple Safari -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

PCRE library buffer overflow

Buffer overflows on regular expressins with codepoints greatr than 255...

Safari < 3.1.1 PCRE Nested Repetition Count Overflow

Binary data 4472.prm...

Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the regular expression compiler...