Unscored severity · published Dec 3, 2007
CVE-2006-7225
Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to cause a denial of service (error or crash) via a regular expression that…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to cause a denial of service (error or crash) via a regular expression that involves a "malformed POSIX character class", as demonstrated via an invalid character after a [[ sequence.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PC
Pcre · Perl
0.91; 0.92; 0.93; 0.94; 0.95; 0.96; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-7225
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-7225
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html
secunia.com
http://secunia.com/advisories/28041
secunia.com
http://secunia.com/advisories/28658
support.avaya.com
http://support.avaya.com/elmodocs2/security/ASA-2007-505.htm
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2008:030
www.pcre.org
http://www.pcre.org/changelog.txt