CVE-2007-1662

Publication date 7 November 2007

Last updated 24 July 2024

Perl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string when searching for unmatched brackets and parentheses, which allows context-dependent attackers to cause a denial of service (crash), possibly involving forward references.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
pcre3	7.10 gutsy	Fixed 7.4-0ubuntu0.7.10.1
	7.04 feisty	Fixed 7.4-0ubuntu0.7.04.1
	6.10 edgy	Fixed 7.4-0ubuntu0.6.10.1
	6.06 LTS dapper	Fixed 7.4-0ubuntu0.6.06.1

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-547-1
PCRE vulnerabilities
27 November 2007

Other references

https://www.cve.org/CVERecord?id=CVE-2007-1662