Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Php | — | Apply OS X security update 2008-005Apply OS X security update 2008-007 | Dec 16, 2011 | Feb 18, 2008 |
| Apple Osx Xquery | — | Upgrade macOS to the latest version | Dec 16, 2011 | Feb 18, 2008 |
| Debian | — | Upgrade pcre3 | Jul 30, 2024 | Feb 18, 2008 |
| Freebsd | — | Upgrade pcre | Dec 10, 2025 | Feb 29, 2008 |
| Gentoo Linux | — | Upgrade dev-lang/php.Upgrade dev-libs/glib.Upgrade dev-libs/libpcre. | Oct 30, 2017 | Feb 18, 2008 |
| Suse | — | Upgrade pcre-64bitUpgrade pcreUpgrade pcre-develUpgrade pcre-32bit | Feb 17, 2015 | Feb 18, 2008 |
| Ubuntu | — | Upgrade libpcre3 | Nov 8, 2024 | Feb 18, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub