CVE-2007-5116

Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.

🔗 References (106)

• cve@mitreftp://aix.software.ibm.com/aix/efixes/security/README
• cve@mitrehttp://docs.info.apple.com/article.html?artnum=307179
• cve@mitrehttp://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
• cve@mitrehttp://lists.vmware.com/pipermail/security-announce/2008/000002.html
• cve@mitrehttp://marc.info/?l=bugtraq&m=120352263023774&w=2
• cve@mitrehttp://secunia.com/advisories/27479
• cve@mitrehttp://secunia.com/advisories/27515
• cve@mitrehttp://secunia.com/advisories/27531
• cve@mitrehttp://secunia.com/advisories/27546
• cve@mitrehttp://secunia.com/advisories/27548
• cve@mitrehttp://secunia.com/advisories/27570
• cve@mitrehttp://secunia.com/advisories/27613
• cve@mitrehttp://secunia.com/advisories/27756
• cve@mitrehttp://secunia.com/advisories/27936
• cve@mitrehttp://secunia.com/advisories/28167