Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adobe Reader Apsb08 13 | — | — | Apr 12, 2012 | Nov 7, 2007 |
| Apple Osx Php | — | Apply OS X security update 2008-002 | Dec 16, 2011 | Nov 7, 2007 |
| Apple Osx Xquery | — | Apply OS X security update 2007-009 | Dec 16, 2011 | Nov 7, 2007 |
| Debian | — | Upgrade pcre3Upgrade glib2.0 | Jul 30, 2024 | Nov 7, 2007 |
| Freebsd | — | Upgrade pcre-utf8Upgrade linux-flashpluginUpgrade pcre | Dec 10, 2025 | Nov 6, 2007 |
| Gentoo Linux | — | Upgrade www-plugins/adobe-flash.Upgrade dev-libs/libpcre. | Oct 30, 2017 | Nov 7, 2007 |
| Suse | — | Upgrade suse-releaseUpgrade flash-player | Feb 17, 2015 | Nov 7, 2007 |
| Ubuntu | — | Upgrade libpcrecpp0Upgrade libpcre3 | Nov 8, 2024 | Nov 7, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub