CVE-2008-0674

Publication date 18 February 2008

Last updated 24 July 2024

Ubuntu priority

Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255.

Read the notes from the security team

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
pcre3	7.10 gutsy	Fixed 7.4-0ubuntu0.7.10.2
	7.04 feisty	Fixed 7.4-0ubuntu0.7.04.2
	6.10 edgy	Fixed 7.4-0ubuntu0.6.10.2
	6.06 LTS dapper	Fixed 7.4-0ubuntu0.6.06.2

How can I get the fixes?
What do statuses mean?

Notes

kees

http://lists.debian.org/debian-security-announce/2008/msg00063.html

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-581-1
PCRE vulnerability
21 February 2008

Other references

https://www.cve.org/CVERecord?id=CVE-2008-0674