Unrated severityNVD Advisory· Published Nov 14, 2007· Updated Jun 16, 2026
CVE-2006-7228
CVE-2006-7228
Description
Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that involves large (1) min, (2) max, or (3) duplength values that cause an incorrect length calculation and trigger a buffer overflow, a different vulnerability than CVE-2006-7227. NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <6.7
Patches
Vulnerability mechanics
References
50- secunia.com/advisories/27582nvdPatch
- bugs.gentoo.org/show_bug.cginvd
- lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.htmlnvd
- lists.vmware.com/pipermail/security-announce/2008/000005.htmlnvd
- lists.vmware.com/pipermail/security-announce/2008/000014.htmlnvd
- scary.beasts.org/security/CESA-2007-006.htmlnvd
- secunia.com/advisories/27741nvd
- secunia.com/advisories/27773nvd
- secunia.com/advisories/27776nvd
- secunia.com/advisories/28027nvd
- secunia.com/advisories/28041nvd
- secunia.com/advisories/28050nvd
- secunia.com/advisories/28406nvd
- secunia.com/advisories/28414nvd
- secunia.com/advisories/28658nvd
- secunia.com/advisories/28714nvd
- secunia.com/advisories/28720nvd
- secunia.com/advisories/29032nvd
- secunia.com/advisories/29085nvd
- secunia.com/advisories/29785nvd
- secunia.com/advisories/30106nvd
- secunia.com/advisories/30155nvd
- secunia.com/advisories/30219nvd
- secunia.com/advisories/31124nvd
- security.gentoo.org/glsa/glsa-200711-30.xmlnvd
- security.gentoo.org/glsa/glsa-200801-02.xmlnvd
- security.gentoo.org/glsa/glsa-200801-18.xmlnvd
- security.gentoo.org/glsa/glsa-200801-19.xmlnvd
- security.gentoo.org/glsa/glsa-200802-10.xmlnvd
- security.gentoo.org/glsa/glsa-200805-11.xmlnvd
- support.avaya.com/elmodocs2/security/ASA-2007-505.htmnvd
- www.debian.org/security/2008/dsa-1570nvd
- www.mandriva.com/security/advisoriesnvd
- www.mandriva.com/security/advisoriesnvd
- www.novell.com/linux/security/advisories/2007_62_pcre.htmlnvd
- www.pcre.org/changelog.txtnvd
- www.redhat.com/support/errata/RHSA-2007-1059.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-1063.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-1065.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-1068.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-1076.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-1077.htmlnvd
- www.redhat.com/support/errata/RHSA-2008-0546.htmlnvd
- www.securityfocus.com/archive/1/488457/100/0/threadednvd
- www.securityfocus.com/archive/1/490917/100/0/threadednvd
- www.securityfocus.com/bid/26462nvd
- www.vupen.com/english/advisories/2008/0637nvd
- www.vupen.com/english/advisories/2008/1234/referencesnvd
- bugzilla.redhat.com/show_bug.cginvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10810nvd
News mentions
0No linked articles in our index yet.