OSVDB ID: 46690

Title: Perl-Compatible Regular Expression (PCRE) pcre_compile.c Crafted Pattern Handling Overflow

Info

Disclosure

Jun 30, 2008

Discovery

Jun 18, 2008

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Patch / RCS
Disclosure: Vendor Verified

Solution

Upgrade to version 7.8 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Keyword: c01905287,HPSBUX02465,SSRT090192 HPSBUX02431, SSRT090085, c01756421
CVE ID: 2008-2371 (see also: NVD)
Secunia Advisory ID: 30916 30944 30945 30958 30961 30967 30972 30990 31200 32222 32454 32746 35074 35650 39300
VUPEN Advisory: ADV-2008-2005 ADV-2008-2006
Other Advisory URL: HPSBUX02431 SSRT090085: http://ftp.gnome.org/pub/GNOME/sources/glib/2.16/glib-2.16.4.changes
http://lists.debian.org/debian-security-announce/2008/msg00183.html
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0305
http://www.debian.org/security/2008/dsa-1602
http://www.gentoo.org/security/en/glsa/glsa-200807-03.xml
http://www.ubuntu.com/usn/usn-628-1
https://lists.ubuntu.com/archives/ubuntu-security-announce/2008-July/000727.html
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00105.html
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2009-07/0008.html
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
http://seclists.org/bugtraq/2009/Oct/172
Vendor Specific News/Changelog Entry: http://bugs.gentoo.org/show_bug.cgi?id=228091
http://www.php.net/ChangeLog-5.php#5.2.7
Vendor Specific Advisory URL: http://support.apple.com/kb/HT1222
http://support.apple.com/kb/HT3216
http://www.gentoo.org/security/en/glsa/glsa-200811-05.xml
http://www.ubuntu.com/usn/USN-624-2
http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01756421

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/46690