6.4
CVE-2007-1661
- EPSS 2.72%
- Published 07.11.2007 23:46:00
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes against some regex patterns in non-UTF-8 mode, which allows context-dependent attackers to obtain sensitive information or cause a denial of service (crash), as demonstrated by the "\X?\d" and "\P{L}?\d" patterns.Data is provided by the National Vulnerability Database (NVD)
Pcre ≫ Perl-compatible Regular Expression Library Version <= 7.2
Pcre ≫ Perl-compatible Regular Expression Library Version7.0
Pcre ≫ Perl-compatible Regular Expression Library Version7.1
Apple ≫ macOS X Server Version10.4.11
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.72% | 0.846 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:P
|