Vulnerability in Pcre

CVE-2007-1662

Perl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string when searching for unmatched brackets and parentheses, which allows context-dependent attackers to cause a denial of service (crash), possibly involving forward references.

EPSS: 0.025 (83.2th percentile) — read the EPSS interpretation.

Affected products

  • Pcre
  • N/a — versions n/a

References