CVE-2007-4767

Publication date 7 November 2007

Last updated 24 July 2024

Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length of (1) a \p sequence, (2) a \P sequence, or (3) a \P{x} sequence, which allows context-dependent attackers to cause a denial of service (infinite loop or crash) or execute arbitrary code.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
pcre3	7.10 gutsy	Fixed 7.4-0ubuntu0.7.10.1
	7.04 feisty	Fixed 7.4-0ubuntu0.7.04.1
	6.10 edgy	Fixed 7.4-0ubuntu0.6.10.1
	6.06 LTS dapper	Fixed 7.4-0ubuntu0.6.06.1

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-547-1
PCRE vulnerabilities
27 November 2007

Other references

https://www.cve.org/CVERecord?id=CVE-2007-4767