Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.
2007-11-07T23:46:00.000
2025-04-09T00:30:58.490
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | debian | debian_linux | 3.1 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | debian | debian_linux | 4.0 | No |
Operating System | mandrakesoft | mandrake_linux | 2007 | No |
Operating System | mandrakesoft | mandrake_linux | 2007 | No |
Operating System | mandrakesoft | mandrake_linux | 2007.1 | No |
Operating System | mandrakesoft | mandrake_linux | 2007.1 | No |
Operating System | mandrakesoft | mandrake_linux | 2008.0 | No |
Operating System | mandrakesoft | mandrake_linux | 2008.0 | No |
Operating System | mandrakesoft | mandrake_linux_corporate_server | 3.0 | No |
Operating System | mandrakesoft | mandrake_linux_corporate_server | 3.0 | No |
Operating System | mandrakesoft | mandrake_linux_corporate_server | 4.0 | No |
Operating System | mandrakesoft | mandrake_linux_corporate_server | 4.0 | No |
Operating System | redhat | enterprise_linux | 3.0 | No |
Operating System | redhat | enterprise_linux | 3.0 | No |
Operating System | redhat | enterprise_linux | 3.0 | No |
Operating System | redhat | enterprise_linux | 4.0 | No |
Operating System | redhat | enterprise_linux | 4.0 | No |
Operating System | redhat | enterprise_linux | 4.0 | No |
Operating System | redhat | enterprise_linux | 5.0 | No |
Operating System | redhat | enterprise_linux | 5.0 | No |
Operating System | redhat | enterprise_linux_desktop | 3.0 | No |
Operating System | redhat | enterprise_linux_desktop | 4.0 | No |
Operating System | redhat | linux_advanced_workstation | 2.1 | No |
Operating System | redhat | linux_advanced_workstation | 2.1 | No |
Operating System | rpath | rpath_linux | 1 | No |
Application | larry_wall | perl | 5.8.0 | Yes |
Application | larry_wall | perl | 5.8.1 | Yes |
Application | larry_wall | perl | 5.8.3 | Yes |
Application | larry_wall | perl | 5.8.4 | Yes |
Application | larry_wall | perl | 5.8.4.1 | Yes |
Application | larry_wall | perl | 5.8.4.2 | Yes |
Application | larry_wall | perl | 5.8.4.2.3 | Yes |
Application | larry_wall | perl | 5.8.4.3 | Yes |
Application | larry_wall | perl | 5.8.4.4 | Yes |
Application | larry_wall | perl | 5.8.4.5 | Yes |
Application | larry_wall | perl | 5.8.6 | Yes |
Application | mandrakesoft | mandrake_multi_network_firewall | 2.0 | Yes |
Application | openpkg | openpkg | current | Yes |
Operating System | redhat | enterprise_linux | 1.0 | Yes |