DSA-1570-1 kazehakase - execution of arbitrary code

Bulletin has no description...

PHP < 5.2.6 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is older than 5.2.6. Such versions may be affected by the following issues : - A stack-based buffer overflow in FastCGI SAPI. - An integer overflow in printf. - An security issue arising from improper calculation of the leng...

Integer overflow

Integer overflow in the PCRE regular expression compiler JavaScriptCore/pcre/pcrecompile.cpp in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflo...

CVE-2008-1026

Integer overflow in the PCRE regular expression compiler JavaScriptCore/pcre/pcrecompile.cpp in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflo...

CVE-2008-1026

Integer overflow in the PCRE regular expression compiler JavaScriptCore/pcre/pcrecompile.cpp in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflo...

CVE-2008-1026

Removed by vendor...

CVE-2008-1026

Integer overflow in the PCRE regular expression compiler JavaScriptCore/pcre/pcrecompile.cpp in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflo...

CVE-2008-1026

In Safari (WebKit), CVE-2008-1026 is a heap-based buffer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp). The issue occurs when a regular expression contains large, nested repetition counts, allowing remote attackers to trigger code execution. Affected prod...

ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability

ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-022 April 16, 2008 -- CVE ID: CVE-2008-1026 -- Affected Vendors: Apple -- Affected Products: Apple Safari -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

Safari < 3.1.1 PCRE Nested Repetition Count Overflow

Binary data 4472.prm...

PCRE library buffer overflow

Buffer overflows on regular expressins with codepoints greatr than 255...

Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the regular expression compiler...

Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus

a. Updated pcre Service Console package addresses several security issuesThe pcre package contains the Perl-Compatible Regular Expression library. pcre is used by various Service Console utilities. Several security issues were discovered in the way PCRE handles regular expressions. If an...

VMSA-2008-0007:MEDIUM Updated Service Console packages pcre, net-snmp, and OpenPegasus

VMSA-2008-0007.2 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0007.2 VMware Security AdvisorySynopsis: Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus VMware Security...

PCRE字符类缓冲区溢出漏洞

BUGTRAQ ID: 27786 CVECAN ID: CVE-2008-0674 PCRE（Perl兼容正则表达式）库是个开放源代码的软件，可提供正则表达式支持。 PCRE在处理字符类时存在缓冲区溢出漏洞，如果用户发送了codepoint大于255的超长UTF-8字符类的话，就可能触发这个溢出，导致执行任意指令。 PCRE 7.6 Debian ------ Debian已经为此发布了一个安全公告（DSA-1499-1）以及相应补丁: DSA-1499-1：New pcre3 packages fix arbitrary code execution...

GLSA-200803-24 : PCRE: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200803-24 PCRE: Buffer overflow PCRE contains a buffer overflow vulnerability when processing a character class containing a very large number of characters with codepoints greater than 255. Impact : A remote attacker could exploi...

PCRE: Buffer overflow

Background PCRE is a Perl-compatible regular expression library. GLib includes a copy of PCRE. Description PCRE contains a buffer overflow vulnerability when processing a character class containing a very large number of characters with codepoints greater than 255. Impact A remote attacker could...

Fedora 7 : pcre-7.3-3.fc7 (2008-1842)

This update re-based pcre to version 7.3 as used in Fedora 8 to address multiple security issues that cause memory corruption, leading to application crash or possible execution of arbitrary code. CVE-2007-1659 315871, CVE-2007-1661 392931, CVE-2007-1662 392921, CVE-2007-4766 392891, CVE-2007-476...

[SECURITY] Fedora 7 Update: pcre-7.3-3.fc7

Perl-compatible regular expression library. PCRE has its own native API, but a set of "wrapper" functions that are base d on the POSIX API are also supplied in the library libpcreposix. Note that this just provides a POSIX calling interface to PCRE: the regular expressions themselves still follow...

FreeBSD : pcre -- buffer overflow vulnerability (f9e96930-e6df-11dc-8c6a-00304881ac9a)

PCRE developers report : A character class containing a very large number of characters with codepoints greater than 255 in UTF-8 mode, of course caused a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...