Unrated severityNVD Advisory· Published Apr 17, 2008· Updated Jun 16, 2026
CVE-2008-1026
CVE-2008-1026
Description
Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp) in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflow.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*
- (no CPE)range: <3.1.1
- Range: <3.1.1
Patches
Vulnerability mechanics
References
13- support.apple.com/kb/HT1467nvdPatch
- www.zerodayinitiative.com/advisories/ZDI-08-022nvdPatch
- lists.apple.com/archives/security-announce/2008//Jul/msg00001.htmlnvd
- lists.apple.com/archives/security-announce/2008/Apr/msg00001.htmlnvd
- secunia.com/advisories/29846nvd
- secunia.com/advisories/31074nvd
- securityreason.com/securityalert/3815nvd
- www.securityfocus.com/archive/1/490990/100/0/threadednvd
- www.securityfocus.com/bid/28815nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2008/1250/referencesnvd
- www.vupen.com/english/advisories/2008/2094/referencesnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/41859nvd
News mentions
0No linked articles in our index yet.