CVE-2007-5116

EPSS 11.41%
Published 07.11.2007 23:46:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.

Affected products Warnungen 0 Metrics 2 CWE 1 References 56

Data is provided by the National Vulnerability Database (NVD)

Larry Wall ≫ Perl Version5.8.0

   Debian ≫ Debian Linux Version3.1
   Debian ≫ Debian Linux Version4.0
   Debian ≫ Debian Linux Version4.0 Editionalpha
   Debian ≫ Debian Linux Version4.0 Editionamd64
   Debian ≫ Debian Linux Version4.0 Editionarm
   Debian ≫ Debian Linux Version4.0 Editionhppa
   Debian ≫ Debian Linux Version4.0 Editionia-32
   Debian ≫ Debian Linux Version4.0 Editionia-64
   Debian ≫ Debian Linux Version4.0 Editionm68k
   Debian ≫ Debian Linux Version4.0 Editionmips
   Debian ≫ Debian Linux Version4.0 Editionmipsel
   Debian ≫ Debian Linux Version4.0 Editionpowerpc
   Debian ≫ Debian Linux Version4.0 Editions390
   Debian ≫ Debian Linux Version4.0 Editionsparc
   Mandrakesoft ≫ Mandrake Linux Version2007
   Mandrakesoft ≫ Mandrake Linux Version2007 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Version2007.1
   Mandrakesoft ≫ Mandrake Linux Version2007.1 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Version2008.0
   Mandrakesoft ≫ Mandrake Linux Version2008.0 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version3.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version3.0 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version4.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version4.0 Editionx86_64
   Redhat ≫ Enterprise Linux Version3.0 Editionas
   Redhat ≫ Enterprise Linux Version3.0 Editiones
   Redhat ≫ Enterprise Linux Version3.0 Editionws
   Redhat ≫ Enterprise Linux Version4.0 Editionas
   Redhat ≫ Enterprise Linux Version4.0 Editiones
   Redhat ≫ Enterprise Linux Version4.0 Editionws
   Redhat ≫ Enterprise Linux Version5.0 Editionclient
   Redhat ≫ Enterprise Linux Version5.0 Editionserver
   Redhat ≫ Enterprise Linux Desktop Version3.0
   Redhat ≫ Enterprise Linux Desktop Version4.0
   Redhat ≫ Linux Advanced Workstation Version2.1 Editionia64
   Redhat ≫ Linux Advanced Workstation Version2.1 Editionitanium_processor
   Rpath ≫ Rpath Linux Version1

Larry Wall ≫ Perl Version5.8.1

Larry Wall ≫ Perl Version5.8.3

Larry Wall ≫ Perl Version5.8.4

Larry Wall ≫ Perl Version5.8.4.1

Larry Wall ≫ Perl Version5.8.4.2

Larry Wall ≫ Perl Version5.8.4.2.3

Larry Wall ≫ Perl Version5.8.4.3

Larry Wall ≫ Perl Version5.8.4.4

Larry Wall ≫ Perl Version5.8.4.5

Larry Wall ≫ Perl Version5.8.6

Mandrakesoft ≫ Mandrake Multi Network Firewall Version2.0

Openpkg ≫ Openpkg Versioncurrent

Redhat ≫ Enterprise Linux Version1.0 Editionapplication_stack

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	11.41%	0.929

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/31208

http://www.ipcop.org/index.php?name=News&file=article&sid=41

http://docs.info.apple.com/article.html?artnum=307179

http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html

http://www.us-cert.gov/cas/techalerts/TA07-352A.html

US Government Resource

http://www.vupen.com/english/advisories/2007/4238

ftp://aix.software.ibm.com/aix/efixes/security/README

http://secunia.com/advisories/27756

http://www.novell.com/linux/security/advisories/2007_24_sr.html

http://lists.vmware.com/pipermail/security-announce/2008/000002.html

http://secunia.com/advisories/28368