high7.5
CVE-2007-5116
Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitr…
Impact
Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Larry Wall | Perl | Versions 5.8.0, 5.8.1, 5.8.3, 5.8.4, 5.8.4.1, 5.8.4.2 |
| Mandrakesoft | Mandrake Multi Network Firewall | Version 2.0 |
| Openpkg | Openpkg | Version current |
| Redhat | Enterprise Linux | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://docs.info.apple.com/article.html?artnum=307179
- http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
- http://lists.vmware.com/pipermail/security-announce/2008/000002.html
- http://marc.info/?l=bugtraq&m=120352263023774&w=2
- http://secunia.com/advisories/27479
- http://secunia.com/advisories/27515
- http://secunia.com/advisories/27531
- http://secunia.com/advisories/27546
- http://secunia.com/advisories/27548
- http://secunia.com/advisories/27570
- http://secunia.com/advisories/27613
- http://secunia.com/advisories/27756
- http://secunia.com/advisories/27936
- http://secunia.com/advisories/28167
- http://secunia.com/advisories/28368
- http://secunia.com/advisories/28387
- http://secunia.com/advisories/28993
- http://secunia.com/advisories/29074
- http://secunia.com/advisories/31208
- http://securitytracker.com/id?1018899
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-31524-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-231524-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018985.1-1
- http://support.avaya.com/elmodocs2/security/ASA-2008-014.htm
- http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10220