php5 in Slackware 10.1

A new php5 package is available for Slackware 10.1 in /testing to fix security issues. PHP has been relinked with the shared PCRE library to fix an overflow issue with PHP's builtin PRCE code, and PEAR::XMLRPC has been upgraded to version 1.4.0 which eliminates the eval function. The eval functio...

GLSA-200509-02 : Gnumeric: Heap overflow in the included PCRE library

The remote host is affected by the vulnerability described in GLSA-200509-02 Gnumeric: Heap overflow in the included PCRE library Gnumeric contains a private copy of libpcre which is subject to an integer overflow leading to a heap overflow see GLSA 200508-17. Impact : An attacker could potential...

PCRE regular expressions library integer overflow

pcrecompile.c regexp parameter integer overflow...

Apache PCRE Integer Overflow Vulnerability

Secunia Advisory: SA16688 Release Date: 2005-09-05 Critical: Less critical Impact: Privilege escalation Where: Local system Solution Status: Vendor Patch Software: Apache 2.0.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. CVE reference:...

Gnumeric: Heap overflow in the included PCRE library

Background The Gnumeric spreadsheet is a versatile application developed as part of the GNOME Office project. libpcre is a library providing functions for Perl-compatible regular expressions. Description Gnumeric contains a private copy of libpcre which is subject to an integer overflow leading t...

[SECURITY] [DSA 800-1] New pcre3 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 800-1 [email protected] http://www.debian.org/security/ Martin Schulze September 2nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 800-1] New pcre3 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 800-1 [email protected] http://www.debian.org/security/ Martin Schulze September 2nd, 2005 http://www.debian.org/security/faq -...

DSA-800-1 pcre3 - integer overflow

Bulletin has no description...

USN-173-4: PCRE vulnerabilities

USN-173-1 fixed a buffer overflow vulnerability in the PCRE library. However, it was found that the various python packages and gnumeric contain static copies of the library code, so these packages need to be updated as well. In gnumeric this bug could be exploited to execute arbitrary code with...

PHP

New PHP packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix security issues. PHP has been relinked with the shared PCRE library to fix an overflow issue with PHP's builtin PRCE code, and PEAR::XMLRPC has been upgraded to version 1.4.0 which eliminates the eval...

PCRE library

New PCRE packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, and -current to fix a security issue. A buffer overflow could be triggered by a specially crafted regular expression. Any applications that use PCRE to process untrusted regular expressions may be exploited to run arbitrary...

USN-173-2: PCRE vulnerability

USN-173-1 fixed a buffer overflow vulnerability in the PCRE library. However, it was determined that this did not suffice to prevent all possible overflows, so another update is necessary. In addition, it was found that the Ubuntu 4.10 version of Apache 2 contains a static copy of the library cod...

USN-173-1: PCRE vulnerability

A buffer overflow has been discovered in the PCRE, a widely used library that provides Perl compatible regular expressions. Specially crafted regular expressions triggered a buffer overflow. On systems that accept arbitrary regular expressions from untrusted users, this could be exploited to...

CVE-2005-2491

Integer overflow in pcrecompile.c in Perl Compatible Regular Expressions PCRE before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow...

CVE-2005-2491

Integer overflow in pcrecompile.c in Perl Compatible Regular Expressions PCRE before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow...

CVE-2005-2491

CVE-2005-2491 refers to an integer overflow in PCRE’s quantifier parsing (PCRE before 6.2) that can cause a heap-based buffer overflow, enabling arbitrary code execution when reg-exes are crafted. Affected software includes programs that embed PCRE (e.g., Python, PHP, and other apps). Connected d...

CVE-2005-2491

Integer overflow in pcrecompile.c in Perl Compatible Regular Expressions PCRE before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow...

CVE-2005-2491

Integer overflow in pcrecompile.c in Perl Compatible Regular Expressions PCRE before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow...

[SA16502] PCRE Quantifier Values Integer Overflow Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

PT-2005-3395 · Python +5 · Python +5

Name of the Vulnerable Software and Affected Versions: PCRE versions prior to 6.2 Apache HTTP Server affected versions not specified Description: The issue is related to an integer overflow in the pcre compile.c file of the Perl Compatible Regular Expressions PCRE library, which can be exploited ...