Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2007-4767

EPSS 1.96% · P84
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2007-4767

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length of (1) a \p sequence, (2) a \P sequence, or (3) a \P{x} sequence, which allows context-dependent attackers to cause a denial of service (infinite loop or crash) or execute arbitrary code.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
PCRE正则表达式库多个安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PCRE(Perl Compatible Regular Expressions)是软件开发者Philip Hazel所研发的一个使用C语言编写的开源正则表达式函数库。 pcre处理某些畸形正则表达式的方法存在多个漏洞: CVE-2007-1659 在处理有孤儿"\E"代码的"\Q\E"序列时存在漏洞,可能导致所编译的正则表达式失去同步,执行破坏的bytecode。 CVE-2007-1660 多种字符类在初始传送阶段错误的计算了大小,导致分配过少的内存。 CVE-2007-1661 非UTF-8模式的多
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2007-4767

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2007-4767

登录查看更多情报信息。

Same Patch Batch · n/a · 2007-11-07 · 18 CVEs total

CVE-2007-3750Apple QuickTime STSD原子远程堆溢出漏洞
CVE-2007-5116Perl Unicode正则表达式堆溢出漏洞
CVE-2007-4768PCRE正则表达式库堆缓冲区溢出漏洞
CVE-2007-4766PCRE正则表达式库整数溢出漏洞
CVE-2007-4677Apple QuickTime颜色表格RGB处理堆溢出漏洞
CVE-2007-4676Apple QuickTime PICT文件处理多个堆溢出漏洞
CVE-2007-4675Apple QuickTime全景示例原子处理远程堆溢出漏洞
CVE-2007-4672Apple QuickTime PICT图形处理远程栈溢出漏洞
CVE-2007-3751Apple QuickTime for Java远程权限提升漏洞
CVE-2007-5741Plone pickled代码 远程代码执行漏洞
CVE-2007-2395Apple QuickTime图形描述原子远程内存破坏漏洞
CVE-2007-1662PCRE正则表达式库拒绝服务攻击漏洞
CVE-2007-1661PCRE正则表达式库敏感信息泄露漏洞
CVE-2007-1660PCRE正则表达式库缓冲区溢出漏洞
CVE-2007-1659PCRE正则表达式库拒绝服务攻击漏洞
CVE-2007-5888Coppermine Photo Gallery Displayecard.PHP 跨站脚本攻击漏洞
CVE-2007-5887ASP Message Board Printer.ASP SQL注入漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2007-4767

No comments yet


Leave a comment