CVE-2008-2371

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

CVE-2008-2371

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

CVE-2008-2371

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

CVE-2008-2371

CVE-2008-2371 describes a heap-based buffer overflow in the PCRE library (version 7.7) specifically in pcre_compile.c. This vulnerability can be triggered by a context-dependent attacker via a regular expression that begins with an option and contains multiple branches, potentially causing a deni...

CVE-2008-2371

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

CVE-2008-2371

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

PCRE: Buffer overflow

Background PCRE is a Perl-compatible regular expression library. GLib includes a copy of PCRE. Description Tavis Ormandy of the Google Security team reported a heap-based buffer overflow when compiling regular expression patterns containing "Internal Option Settings" such as "?i ". Impact A remot...

PCRE library buffer overflow

Buffer overflow on regular expression compiling...

PCRE pcre_compile.c文件堆溢出漏洞

CVECAN ID: CVE-2008-2371 PCRE（Perl兼容正则表达式）库是个开放源代码的软件，可提供正则表达式支持。 当PCRE在启动模式（pattern）指定选项的时候，为了防止将其不必要的编译到字节代码，会如pcrecompile选项所指定的方式传送回调用程序（也就是/?ia|b/ == /a|b/i）。如果模式包含有多个分支的话，就会意外的将新选项回传的过远，仅有第一个分支获得了新的标记，而在第二次编译传送的时候会一直设置新的标记，导致大小计算传送和实际的编译传送之间出现不匹配，这可能触发堆溢出。 PCRE 7.7 厂商补丁： Debian ------...

CVE-2008-2371: Out-of-bounds Write

Heap-based buffer overflow in pcrecompile.c in the Perl-Compatible Regular Expression PCRE library 7.7 allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a regular expression that begins with an option and contains multiple branches...

PT-2008-1088 · Pcre +1 · Pcre Library +1

Name of the Vulnerable Software and Affected Versions: PCRE library versions prior to 7.7 Description: The issue is related to a heap-based buffer overflow in the PCRE library, specifically in the pcre compile.c file. This allows context-dependent attackers to cause a denial of service or possibl...

[SECURITY] Fedora 8 Update: pcre-7.3-4.fc8

Perl-compatible regular expression library. PCRE has its own native API, but a set of "wrapper" functions that are base d on the POSIX API are also supplied in the library libpcreposix. Note that this just provides a POSIX calling interface to PCRE: the regular expressions themselves still follow...

[SECURITY] Fedora 9 Update: pcre-7.3-4.fc9

Perl-compatible regular expression library. PCRE has its own native API, but a set of "wrapper" functions that are base d on the POSIX API are also supplied in the library libpcreposix. Note that this just provides a POSIX calling interface to PCRE: the regular expressions themselves still follow...

GLSA-200805-11 : Chicken: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200805-11 Chicken: Multiple vulnerabilities Chicken includes a copy of PCRE which is vulnerable to multiple buffer overflows and memory corruption vulnerabilities GLSA 200711-30. Impact : An attacker could entice a user to process...

Debian Security Advisory DSA 1570-1 (kazehakase)

The remote host is missing an update to kazehakase announced via advisory DSA 1570-1. OpenVAS Vulnerability Test $Id: deb15701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1570-1 kazehakase Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1570-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Chicken: Multiple vulnerabilities

Background Chicken is a Scheme interpreter and native Scheme to C compiler. Description Chicken includes a copy of PCRE which is vulnerable to multiple buffer overflows and memory corruption vulnerabilities GLSA 200711-30. Impact An attacker could entice a user to process specially crafted regula...

Debian DSA-1570-1 : kazehakase - various

Andrews Salomon reported that kazehakase, a GTK+-based web browser that allows pluggable rendering engines, contained an embedded copy of the PCRE library in its source tree which was compiled in and used in preference to the system-wide version of this library. The PCRE library has been updated ...

PHP 5.2.6修复多个安全漏洞

BUGTRAQ ID: 29009 CVECAN ID: CVE-2008-0599 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的5.2.6之前版本存在多个安全漏洞，允许恶意用户绕过安全限制、导致拒绝服务或入侵有漏洞的系统。 1 FastCGI SAPI中的安全漏洞可能导致栈溢出。 2 处理escapeshellcmd中不完整多字节字符时存在安全漏洞。 3 cURL中的错误可能导致绕过safemode限制。 4 PCRE中的边界条件错误可能允许恶意用户导致拒绝服务或入侵有漏洞的系统。 PHP 5.2.6 PHP ---...

[SECURITY] [DSA 1570-1] New kazehakase packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1570-1 [email protected] http://www.debian.org/security/ Steve Kemp May 06, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...