header-logo
Suggest Exploit
vendor:
PCRE Library
by:
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: PCRE Library
Affected Version From: Pre-8.02
Affected Version To: 08.02
Patch Exists: YES
Related CWE:
CPE: pcre
Metasploit:
Other Scripts:
Platforms Tested:

PCRE Buffer Overflow Vulnerability

PCRE is prone to a buffer-overflow vulnerability because the library fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of an application using the PCRE library. Failed attacks may result in denial-of-service conditions.

Mitigation:

Update to PCRE version 8.02 or later. Avoid using untrusted input in PCRE expressions.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/39974/info

PCRE is prone to a buffer-overflow vulnerability because the library fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of an application using the PCRE library. Failed attacks may result in denial-of-service conditions.

Versions prior to PCRE 8.02 are vulnerable; applications which use the PCRE library may also be affected. 

perl -e 'print "/","("x819, ")"x819, "/"' | pcretest