CVEvulnerability

CVE-2006-7225

4.3 MEDIUM Published 2007-12-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-12-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to cause a denial of service (error or crash) via a regular expression that involves a "malformed POSIX character class", as demonstrated via an invalid character after a [[ sequence.

Affected configurations

• perl pcre 0.91 • perl pcre 0.92 • perl pcre 0.93 • perl pcre 0.94 • perl pcre 0.95 • perl pcre 0.96 • perl pcre 0.97 • perl pcre 0.98 • perl pcre 0.99 • perl pcre 1.00 • perl pcre 1.01 • perl pcre 1.02 • perl pcre 1.03 • perl pcre 1.04 • perl pcre 1.05 • perl pcre 1.06 • perl pcre 1.07 • perl pcre 1.08 • perl pcre 1.09 • perl pcre 2.0 • perl pcre 2.01 • perl pcre 2.02 • perl pcre 2.03 • perl pcre 2.04 • perl pcre 2.05 • perl pcre 2.06 • perl pcre 2.07 • perl pcre 2.08 • perl pcre 3.0 • perl pcre 3.1 • perl pcre 3.2 • perl pcre 3.3 • perl pcre 3.4 • perl pcre 3.5 • perl pcre 3.6 • perl pcre 3.7 • perl pcre 3.8 • perl pcre 3.9 • perl pcre 4.0 • perl pcre 4.1 • perl pcre 4.2 • perl pcre 4.3 • perl pcre 4.4 • perl pcre 4.5 • perl pcre 5.0 • perl pcre 6.0 • perl pcre 6.1 • perl pcre 6.2 • perl pcre 6.3 • perl pcre 6.4 • perl pcre 6.5 • perl pcre 6.6

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References