Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
References
Link Providers
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt cve-icon cve-icon
ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U cve-icon cve-icon
http://docs.info.apple.com/article.html?artnum=302847 cve-icon cve-icon
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 cve-icon cve-icon
http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html cve-icon cve-icon
http://marc.info/?l=bugtraq&m=112605112027335&w=2 cve-icon cve-icon
http://marc.info/?l=bugtraq&m=112606064317223&w=2 cve-icon cve-icon
http://marc.info/?l=bugtraq&m=130497311408250&w=2 cve-icon cve-icon
http://secunia.com/advisories/16502 cve-icon cve-icon
http://secunia.com/advisories/16679 cve-icon cve-icon
http://secunia.com/advisories/17252 cve-icon cve-icon
http://secunia.com/advisories/17813 cve-icon cve-icon
http://secunia.com/advisories/19072 cve-icon cve-icon
http://secunia.com/advisories/19193 cve-icon cve-icon
http://secunia.com/advisories/19532 cve-icon cve-icon
http://secunia.com/advisories/21522 cve-icon cve-icon
http://secunia.com/advisories/22691 cve-icon cve-icon
http://secunia.com/advisories/22875 cve-icon cve-icon
http://securityreason.com/securityalert/604 cve-icon cve-icon
http://securitytracker.com/id?1014744 cve-icon cve-icon
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1 cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm cve-icon cve-icon
http://support.avaya.com/elmodocs2/security/ASA-2006-159.htm cve-icon cve-icon
http://www.debian.org/security/2005/dsa-800 cve-icon cve-icon
http://www.debian.org/security/2005/dsa-817 cve-icon cve-icon
http://www.debian.org/security/2005/dsa-819 cve-icon cve-icon
http://www.debian.org/security/2005/dsa-821 cve-icon cve-icon
http://www.ethereal.com/appnotes/enpa-sa-00021.html cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200508-17.xml cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200509-02.xml cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200509-08.xml cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200509-12.xml cve-icon cve-icon
http://www.gentoo.org/security/en/glsa/glsa-200509-19.xml cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2005_48_pcre.html cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2005_49_php.html cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2005_52_apache2.html cve-icon cve-icon
http://www.php.net/release_4_4_1.php cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2005-358.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2005-761.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2006-0197.html cve-icon cve-icon
http://www.securityfocus.com/archive/1/427046/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/archive/1/428138/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/14620 cve-icon cve-icon
http://www.securityfocus.com/bid/15647 cve-icon cve-icon
http://www.vupen.com/english/advisories/2005/1511 cve-icon cve-icon
http://www.vupen.com/english/advisories/2005/2659 cve-icon cve-icon
http://www.vupen.com/english/advisories/2006/0789 cve-icon cve-icon
http://www.vupen.com/english/advisories/2006/4320 cve-icon cve-icon
http://www.vupen.com/english/advisories/2006/4502 cve-icon cve-icon
https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2005-2491 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11516 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1496 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1659 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A735 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2005-2491 cve-icon
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2005-08-22T04:00:00

Updated: 2024-08-07T22:30:01.424Z

Reserved: 2005-08-08T00:00:00

Link: CVE-2005-2491

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2005-08-23T04:00:00.000

Modified: 2024-11-20T23:59:40.840

Link: CVE-2005-2491

cve-icon Redhat

Severity : Moderate

Publid Date: 2005-08-01T00:00:00Z

Links: CVE-2005-2491 - Bugzilla