VYPR
Unrated severityNVD Advisory· Published Jan 9, 2008· Updated Apr 23, 2026

CVE-2007-4772

CVE-2007-4772

Description

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

Affected products

7
  • cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
    Range: >=7.4,<7.4.19
  • cpe:2.3:a:tcl:tcl\/tk:*:*:*:*:*:*:*:*
    Range: <8.4.17
  • cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

53

News mentions

0

No linked articles in our index yet.