CVE-2007-1659

中 6.8CVE-2007-1659 · 07/11/2007 公開 · 16/06/2026 更新

要点

CVE-2007-1659 は pcre (pcre) に影響する深刻度「中」 (CVSS 6.8) の脆弱性です。
今後30日間に悪用される確率（EPSS）：3.5%（全脆弱性の 89.3% より高い）。
修正版の情報はまだありません。参考情報のベンダー勧告を確認してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
pcre pcre	`≤ 7.3`	修正版なし

概要

Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes.

参考情報

bugs.gentoo.org/show_bug.cgi
docs.info.apple.com/article.html
docs.info.apple.com/article.html
lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html
mail.gnome.org/archives/gtk-devel-list/2007-November/msg00022.html
secunia.com/advisories/27538 · Vendor Advisory
secunia.com/advisories/27543 · Vendor Advisory
secunia.com/advisories/27547 · Vendor Advisory
secunia.com/advisories/27554 · Vendor Advisory
secunia.com/advisories/27598 · Vendor Advisory
secunia.com/advisories/27697 · Vendor Advisory
secunia.com/advisories/27741 · Vendor Advisory
secunia.com/advisories/27773 · Vendor Advisory
secunia.com/advisories/27965 · Vendor Advisory
secunia.com/advisories/28041 · Vendor Advisory
secunia.com/advisories/28136 · Vendor Advisory
secunia.com/advisories/28406 · Vendor Advisory
secunia.com/advisories/28414 · Vendor Advisory
secunia.com/advisories/28658 · Vendor Advisory
secunia.com/advisories/28714 · Vendor Advisory
secunia.com/advisories/28720 · Vendor Advisory
secunia.com/advisories/29267 · Vendor Advisory
secunia.com/advisories/29420 · Vendor Advisory
secunia.com/advisories/30106
secunia.com/advisories/30155 · Vendor Advisory
secunia.com/advisories/30219
security.gentoo.org/glsa/glsa-200711-30.xml
security.gentoo.org/glsa/glsa-200801-02.xml
security.gentoo.org/glsa/glsa-200801-18.xml
security.gentoo.org/glsa/glsa-200801-19.xml
security.gentoo.org/glsa/glsa-200805-11.xml
securitytracker.com/id
support.avaya.com/elmodocs2/security/ASA-2007-505.htm
debian.org/security/2007/dsa-1399
debian.org/security/2008/dsa-1570
mandriva.com/security/advisories
mandriva.com/security/advisories
mandriva.com/security/advisories
novell.com/linux/security/advisories/2007_25_sr.html
novell.com/linux/security/advisories/2007_62_pcre.html
pcre.org/changelog.txt
redhat.com/support/errata/RHSA-2007-0967.html
redhat.com/support/errata/RHSA-2007-1068.html
securityfocus.com/archive/1/483357/100/0/threaded
securityfocus.com/archive/1/483579/100/0/threaded
securityfocus.com/bid/26346 · Patch
us-cert.gov/cas/techalerts/TA07-352A.html · US Government Resource
vupen.com/english/advisories/2007/3725
vupen.com/english/advisories/2007/3790
vupen.com/english/advisories/2007/4238
vupen.com/english/advisories/2008/0924/references
exchange.xforce.ibmcloud.com/vulnerabilities/38272
issues.rpath.com/browse/RPL-1738
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9725
usn.ubuntu.com/547-1
redhat.com/archives/fedora-package-announce/2008-March/msg00181.html

pcre のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン