NetSight
medium4.0

CVE-2007-4772

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows…

Impact

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

Affected products

VendorProductAffected versions
PostgresqlPostgresql
from 7.4 before 7.4.19
from 8.0 before 8.0.15
from 8.1 before 8.1.11
from 8.2 before 8.2.6
TclTcl\/Tk
before 8.4.17
DebianDebian Linux
Version 3.1
CanonicalUbuntu Linux
Versions 6.06, 6.10, 7.04, 7.10

Weakness classification

References