CVE-2008-0674

Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255.

🔗 References (108)

• secalert@redhathttp://ftp.gnome.org/pub/gnome/sources/glib/2.14/glib-2.14.6.news
• secalert@redhathttp://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html
• secalert@redhathttp://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
• secalert@redhathttp://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html
• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html
• secalert@redhathttp://pcre.org/changelog.txt
• secalert@redhathttp://secunia.com/advisories/28923
• secalert@redhathttp://secunia.com/advisories/28957
• secalert@redhathttp://secunia.com/advisories/28960
• secalert@redhathttp://secunia.com/advisories/28985
• secalert@redhathttp://secunia.com/advisories/28996
• secalert@redhathttp://secunia.com/advisories/29027
• secalert@redhathttp://secunia.com/advisories/29048
• secalert@redhathttp://secunia.com/advisories/29175
• secalert@redhathttp://secunia.com/advisories/29267