Back to feed
EUVD-2007-5097 · Published Nov 7, 2007
Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.
Technologies
Mandrakesoft Mandrake Linux Corporate ServerRedhat Enterprise Linux DesktopMandrakesoft Mandrake Multi Network FirewallRpath Rpath LinuxDebian Debian LinuxMandrakesoft Mandrake LinuxOpenpkg OpenpkgLarry_Wall PerlRedhat Linux Advanced WorkstationRedhat Enterprise Linux
Weaknesses
CWE-119
CVSS scores
- v2.07.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- ftp://aix.software.ibm.com/aix/efixes/security/README
- http://docs.info.apple.com/article.html?artnum=307179
- http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
- http://lists.vmware.com/pipermail/security-announce/2008/000002.html
- http://marc.info/?l=bugtraq&m=120352263023774&w=2
- http://secunia.com/advisories/27479
Potentially impacted assets
See if this affects your attack surface
