CVE-2007-5116

EPSS 4.83%
Veröffentlicht 07.11.2007 23:46:00
Zuletzt bearbeitet 16.06.2026 22:45:28
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 56

NVD 14 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Larry Wall ≫ Perl Version5.8.0

   Debian ≫ Debian Linux Version3.1
   Debian ≫ Debian Linux Version4.0
   Debian ≫ Debian Linux Version4.0 Editionalpha
   Debian ≫ Debian Linux Version4.0 Editionamd64
   Debian ≫ Debian Linux Version4.0 Editionarm
   Debian ≫ Debian Linux Version4.0 Editionhppa
   Debian ≫ Debian Linux Version4.0 Editionia-32
   Debian ≫ Debian Linux Version4.0 Editionia-64
   Debian ≫ Debian Linux Version4.0 Editionm68k
   Debian ≫ Debian Linux Version4.0 Editionmips
   Debian ≫ Debian Linux Version4.0 Editionmipsel
   Debian ≫ Debian Linux Version4.0 Editionpowerpc
   Debian ≫ Debian Linux Version4.0 Editions390
   Debian ≫ Debian Linux Version4.0 Editionsparc
   Mandrakesoft ≫ Mandrake Linux Version2007
   Mandrakesoft ≫ Mandrake Linux Version2007 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Version2007.1
   Mandrakesoft ≫ Mandrake Linux Version2007.1 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Version2008.0
   Mandrakesoft ≫ Mandrake Linux Version2008.0 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version3.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version3.0 Editionx86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version4.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version4.0 Editionx86_64
   Redhat ≫ Enterprise Linux Version3.0 Editionas
   Redhat ≫ Enterprise Linux Version3.0 Editiones
   Redhat ≫ Enterprise Linux Version3.0 Editionws
   Redhat ≫ Enterprise Linux Version4.0 Editionas
   Redhat ≫ Enterprise Linux Version4.0 Editiones
   Redhat ≫ Enterprise Linux Version4.0 Editionws
   Redhat ≫ Enterprise Linux Version5.0 Editionclient
   Redhat ≫ Enterprise Linux Version5.0 Editionserver
   Redhat ≫ Enterprise Linux Desktop Version3.0
   Redhat ≫ Enterprise Linux Desktop Version4.0
   Redhat ≫ Linux Advanced Workstation Version2.1 Editionia64
   Redhat ≫ Linux Advanced Workstation Version2.1 Editionitanium_processor
   Rpath ≫ Rpath Linux Version1

Larry Wall ≫ Perl Version5.8.1

Larry Wall ≫ Perl Version5.8.3

Larry Wall ≫ Perl Version5.8.4

Larry Wall ≫ Perl Version5.8.4.1

Larry Wall ≫ Perl Version5.8.4.2

Larry Wall ≫ Perl Version5.8.4.2.3

Larry Wall ≫ Perl Version5.8.4.3

Larry Wall ≫ Perl Version5.8.4.4

Larry Wall ≫ Perl Version5.8.4.5

Larry Wall ≫ Perl Version5.8.6

Mandrakesoft ≫ Mandrake Multi Network Firewall Version2.0

Openpkg ≫ Openpkg Versioncurrent

Redhat ≫ Enterprise Linux Version1.0 Editionapplication_stack

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.83%	0.908

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/31208

http://www.ipcop.org/index.php?name=News&file=article&sid=41

http://docs.info.apple.com/article.html?artnum=307179

http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html

http://www.us-cert.gov/cas/techalerts/TA07-352A.html

US Government Resource

http://www.vupen.com/english/advisories/2007/4238

ftp://aix.software.ibm.com/aix/efixes/security/README

http://secunia.com/advisories/27756

http://www.novell.com/linux/security/advisories/2007_24_sr.html

http://lists.vmware.com/pipermail/security-announce/2008/000002.html

http://secunia.com/advisories/28368

http://www.securityfocus.com/archive/1/485936/100/0/threaded

http://www.securityfocus.com/archive/1/486859/100/0/threaded

http://www.vmware.com/security/advisories/VMSA-2008-0001.html

http://www.vupen.com/english/advisories/2008/0064

http://marc.info/?l=bugtraq&m=120352263023774&w=2

http://secunia.com/advisories/27479

http://secunia.com/advisories/27515

http://secunia.com/advisories/27531

Vendor Advisory

http://secunia.com/advisories/27546

http://secunia.com/advisories/27548

http://secunia.com/advisories/27570

http://secunia.com/advisories/27613

http://secunia.com/advisories/27936

http://secunia.com/advisories/28167

http://secunia.com/advisories/28387

http://secunia.com/advisories/28993

http://secunia.com/advisories/29074

http://securitytracker.com/id?1018899

http://sunsolve.sun.com/search/document.do?assetkey=1-26-31524-1

http://sunsolve.sun.com/search/document.do?assetkey=1-66-231524-1

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018985.1-1

http://support.avaya.com/elmodocs2/security/ASA-2008-014.htm

http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10220

http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10244

http://www.debian.org/security/2007/dsa-1400

http://www.gentoo.org/security/en/glsa/glsa-200711-28.xml

http://www.mandriva.com/security/advisories?name=MDKSA-2007:207

Patch

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.023.html

http://www.redhat.com/support/errata/RHSA-2007-0966.html

http://www.redhat.com/support/errata/RHSA-2007-1011.html

http://www.securityfocus.com/archive/1/483563/100/0/threaded

http://www.securityfocus.com/archive/1/483584/100/0/threaded

http://www.securityfocus.com/bid/26350

http://www.ubuntu.com/usn/usn-552-1

http://www.vupen.com/english/advisories/2007/3724

http://www.vupen.com/english/advisories/2007/4255

http://www.vupen.com/english/advisories/2008/0641

https://bugzilla.redhat.com/show_bug.cgi?id=323571

https://bugzilla.redhat.com/show_bug.cgi?id=378131

https://exchange.xforce.ibmcloud.com/vulnerabilities/38270

https://issues.rpath.com/browse/RPL-1813

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10669

https://nvd.nist.gov/vuln/detail/CVE-2007-5116

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-5116

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-5116

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2007-5116