CVE-2007-1659
EPSS 5.3%pcre3 - arbitrary code execution
Published: 11/7/2007Modified: 4/28/2026
Description
Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via regex patterns containing unmatched "\Q\E" sequences with orphan "\E" codes.
Affected packages (4)
- Debian/glib2.0from 0, < 2.14.3-1
- Debian/pcre3from 0, < 7.3-1
- Debian/pcre3from 0, < 4.5+7.4-1
- Debian/pcre3from 0, < 6.7+7.4-2+lenny1