CVE Feed

    Dashboard / CVE / CVE-2007-1660

    CVE-2007-1660

    Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.

    Published:Nov 5, 2007
    Last Modified:Apr 23, 2026
    EPS:Nov 7, 2007
    EPSS Score:0.05628
    CVSS Score:6.8

    Affected Products

    Vendor
    Pcre
    Product
    Pcre
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Related CVEs

    CVE-2020-14155 (CVSS 5.3) — libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.…
    CVE-2019-20838 (CVSS 7.5) — libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has mo…
    CVE-2017-16231 (CVSS 5.5) — In PCRE 8.41, after compiling, a pcretest load test PoC produces a crash overflow in the function match() in p…
    CVE-2017-11164 (CVSS 7.5) — In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolle…
    CVE-2017-7246 (CVSS 7.8) — Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allow…
    CVE-2017-7245 (CVSS 7.8) — Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allow…
    CVE-2017-7244 (CVSS 5.5) — The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denia…
    CVE-2017-7186 (CVSS 7.5) — libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segment…
    CVE-2017-6004 (CVSS 7.5) — The compile_bracket_matchingpath function in pcre_jit_compile.c in PCRE through 8.x before revision 1680 (e.g.…
    CVE-2014-9769 (CVSS 7.3) — pcre_jit_compile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives, which allow…

    References

    http://bugs.gentoo.org/show_bug.cgi?id=198976
    http://docs.info.apple.com/article.html?artnum=307179
    http://docs.info.apple.com/article.html?artnum=307562
    http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
    http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
    http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html
    http://lists.vmware.com/pipermail/security-announce/2008/000014.html
    http://mail.gnome.org/archives/gtk-devel-list/2007-November/msg00022.html
    http://secunia.com/advisories/27538
    http://secunia.com/advisories/27543
    http://secunia.com/advisories/27547
    http://secunia.com/advisories/27554
    http://secunia.com/advisories/27598
    http://secunia.com/advisories/27697
    http://secunia.com/advisories/27741
    http://secunia.com/advisories/27773
    http://secunia.com/advisories/27776
    http://secunia.com/advisories/27862
    http://secunia.com/advisories/27965
    http://secunia.com/advisories/28136
    http://secunia.com/advisories/28406
    http://secunia.com/advisories/28414
    http://secunia.com/advisories/28658
    http://secunia.com/advisories/28714
    http://secunia.com/advisories/28720
    http://secunia.com/advisories/29420
    http://secunia.com/advisories/29785
    http://secunia.com/advisories/30106
    http://secunia.com/advisories/30155
    http://secunia.com/advisories/30219
    http://secunia.com/advisories/31124
    http://security.gentoo.org/glsa/glsa-200711-30.xml
    http://security.gentoo.org/glsa/glsa-200801-02.xml
    http://security.gentoo.org/glsa/glsa-200801-18.xml
    http://security.gentoo.org/glsa/glsa-200801-19.xml
    http://security.gentoo.org/glsa/glsa-200805-11.xml
    http://securitytracker.com/id?1018895
    http://support.avaya.com/elmodocs2/security/ASA-2007-488.htm
    http://www.debian.org/security/2007/dsa-1399
    http://www.debian.org/security/2008/dsa-1570
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:211
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:212
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:213
    http://www.novell.com/linux/security/advisories/2007_25_sr.html
    http://www.novell.com/linux/security/advisories/2007_62_pcre.html
    http://www.redhat.com/support/errata/RHSA-2007-0967.html
    http://www.redhat.com/support/errata/RHSA-2007-0968.html
    http://www.redhat.com/support/errata/RHSA-2007-1063.html
    http://www.redhat.com/support/errata/RHSA-2007-1065.html
    http://www.redhat.com/support/errata/RHSA-2008-0546.html
    http://www.securityfocus.com/archive/1/483357/100/0/threaded
    http://www.securityfocus.com/archive/1/483579/100/0/threaded
    http://www.securityfocus.com/archive/1/490917/100/0/threaded
    http://www.securityfocus.com/bid/26346
    http://www.us-cert.gov/cas/techalerts/TA07-352A.html
    http://www.vupen.com/english/advisories/2007/3725
    http://www.vupen.com/english/advisories/2007/3790
    http://www.vupen.com/english/advisories/2007/4238
    http://www.vupen.com/english/advisories/2008/0924/references
    http://www.vupen.com/english/advisories/2008/1234/references
    https://bugzilla.redhat.com/show_bug.cgi?id=315881
    https://exchange.xforce.ibmcloud.com/vulnerabilities/38273
    https://issues.rpath.com/browse/RPL-1738
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10562
    https://usn.ubuntu.com/547-1/
    http://bugs.gentoo.org/show_bug.cgi?id=198976
    http://docs.info.apple.com/article.html?artnum=307179
    http://docs.info.apple.com/article.html?artnum=307562
    http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
    http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
    http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html
    http://lists.vmware.com/pipermail/security-announce/2008/000014.html
    http://mail.gnome.org/archives/gtk-devel-list/2007-November/msg00022.html
    http://secunia.com/advisories/27538
    http://secunia.com/advisories/27543
    http://secunia.com/advisories/27547
    http://secunia.com/advisories/27554
    http://secunia.com/advisories/27598
    http://secunia.com/advisories/27697
    http://secunia.com/advisories/27741
    http://secunia.com/advisories/27773
    http://secunia.com/advisories/27776
    http://secunia.com/advisories/27862
    http://secunia.com/advisories/27965
    http://secunia.com/advisories/28136
    http://secunia.com/advisories/28406
    http://secunia.com/advisories/28414
    http://secunia.com/advisories/28658
    http://secunia.com/advisories/28714
    http://secunia.com/advisories/28720
    http://secunia.com/advisories/29420
    http://secunia.com/advisories/29785
    http://secunia.com/advisories/30106
    http://secunia.com/advisories/30155
    http://secunia.com/advisories/30219
    http://secunia.com/advisories/31124
    http://security.gentoo.org/glsa/glsa-200711-30.xml
    http://security.gentoo.org/glsa/glsa-200801-02.xml
    http://security.gentoo.org/glsa/glsa-200801-18.xml
    http://security.gentoo.org/glsa/glsa-200801-19.xml
    http://security.gentoo.org/glsa/glsa-200805-11.xml
    http://securitytracker.com/id?1018895
    http://support.avaya.com/elmodocs2/security/ASA-2007-488.htm
    http://www.debian.org/security/2007/dsa-1399
    http://www.debian.org/security/2008/dsa-1570
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:211
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:212
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:213
    http://www.novell.com/linux/security/advisories/2007_25_sr.html
    http://www.novell.com/linux/security/advisories/2007_62_pcre.html
    http://www.redhat.com/support/errata/RHSA-2007-0967.html
    http://www.redhat.com/support/errata/RHSA-2007-0968.html
    http://www.redhat.com/support/errata/RHSA-2007-1063.html
    http://www.redhat.com/support/errata/RHSA-2007-1065.html
    http://www.redhat.com/support/errata/RHSA-2008-0546.html
    http://www.securityfocus.com/archive/1/483357/100/0/threaded
    http://www.securityfocus.com/archive/1/483579/100/0/threaded
    http://www.securityfocus.com/archive/1/490917/100/0/threaded
    http://www.securityfocus.com/bid/26346
    http://www.us-cert.gov/cas/techalerts/TA07-352A.html
    http://www.vupen.com/english/advisories/2007/3725
    http://www.vupen.com/english/advisories/2007/3790
    http://www.vupen.com/english/advisories/2007/4238
    http://www.vupen.com/english/advisories/2008/0924/references
    http://www.vupen.com/english/advisories/2008/1234/references
    https://bugzilla.redhat.com/show_bug.cgi?id=315881
    https://exchange.xforce.ibmcloud.com/vulnerabilities/38273
    https://issues.rpath.com/browse/RPL-1738
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10562
    https://usn.ubuntu.com/547-1/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High