Revision Date: | 2013-04-29 | Version: | 12 | Title: | Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that involves large (1) min, (2) max, or (3) duplength values that cause an incorrect length calculation and trigger a buffer overflow, a different vulnerability than CVE-2006-7227. NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split. | Description: | Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that involves large (1) min, (2) max, or (3) duplength values that cause an incorrect length calculation and trigger a buffer overflow, a different vulnerability than CVE-2006-7227. NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split. | Family: | unix | Class: | vulnerability | Status: | ACCEPTED | Reference(s): | CVE-2006-7228
| Platform(s): | CentOS Linux 3 CentOS Linux 4 CentOS Linux 5 Oracle Linux 4 Oracle Linux 5 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5
| Product(s): | | Definition Synopsis | OS Section: RHEL3, CentOS3 RHEL3 or CentOS3
The operating system installed on the system is Red Hat Enterprise Linux 3
OR CentOS Linux 3.x
AND Configuration section
python-devel is earlier than 0:2.2.3-6.8
OR tkinter is earlier than 0:2.2.3-6.8
OR python-tools is earlier than 0:2.2.3-6.8
OR python is earlier than 0:2.2.3-6.8
OR pcre-devel is earlier than 0:3.9-10.4
OR pcre is earlier than 0:3.9-10.4
OR OS Section: RHEL4, CentOS4, Oracle Linux 4
RHEL4, CentOS4 or Oracle Linux 4
The operating system installed on the system is Red Hat Enterprise Linux 4
OR CentOS Linux 4.x
OR Oracle Linux 4.x
AND Configuration section
python-devel is earlier than 0:2.3.4-14.4.el4_6.1
OR tkinter is earlier than 0:2.3.4-14.4.el4_6.1
OR python-tools is earlier than 0:2.3.4-14.4.el4_6.1
OR python is earlier than 0:2.3.4-14.4.el4_6.1
OR pcre-devel is earlier than 0:4.5-4.el4_6.6
OR python-docs is earlier than 0:2.3.4-14.4.el4_6.1
OR pcre is earlier than 0:4.5-4.el4_6.6
OR OS Section: RHEL5, CentOS5, Oracle Linux 5
RHEL5, CentOS5 or Oracle Linux 5
The operating system installed on the system is Red Hat Enterprise Linux 5
OR The operating system installed on the system is CentOS Linux 5.x
OR Oracle Linux 5.x
AND Configuration section
pcre-devel is earlier than 0:6.6-2.el5_1.7
OR pcre is earlier than 0:6.6-2.el5_1.7
|
|