Vulnerability Report

CVE-2008-0674

Title: Pcre RCE

Memory Corruption

Proof Of Concept

No public PoC currently indexed for CVE-2008-0674.

CWE Category CWE-119

Published Date Feb 18, 2008

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 7.5 CVSS v2.0

Exploit Probability (EPSS)

5.91%

Vulnerability Summary

CVE-2008-0674: Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class with a large number of characters with Unicode code points greater than 255.

Impacted Vendors

pcre 1

perl 1

Reference Links

http://ftp.gnome.org/pub/gnome/sources/glib/2.14/glib-2.14.6.news http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html http://pcre.org/changelog.txt http://secunia.com/advisories/28923 http://secunia.com/advisories/28957 http://secunia.com/advisories/28960 http://secunia.com/advisories/28985 http://secunia.com/advisories/28996 http://secunia.com/advisories/29027 http://secunia.com/advisories/29048 http://secunia.com/advisories/29175 http://secunia.com/advisories/29267 http://secunia.com/advisories/29282 http://secunia.com/advisories/30048 http://secunia.com/advisories/30345 http://secunia.com/advisories/31326 http://secunia.com/advisories/32222 http://secunia.com/advisories/32746 http://secunia.com/advisories/36096 http://security.gentoo.org/glsa/glsa-200803-24.xml http://security.gentoo.org/glsa/glsa-200811-05.xml http://support.apple.com/kb/HT3216 http://support.apple.com/kb/HT3757 http://wiki.rpath.com/Advisories:rPSA-2008-0086 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0086 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176 http://www.debian.org/security/2008/dsa-1499 http://www.mandriva.com/security/advisories?name=MDVSA-2008:053 http://www.openwall.com/lists/oss-security/2008/05/02/2 http://www.php.net/ChangeLog-5.php http://www.securityfocus.com/archive/1/488927/100/0/threaded http://www.securityfocus.com/archive/1/492535/100/0/threaded http://www.securityfocus.com/bid/27786 http://www.securityfocus.com/bid/29009 http://www.securityfocus.com/bid/31681 http://www.securitytracker.com/id?1022674 http://www.us-cert.gov/cas/techalerts/TA09-218A.html http://www.vupen.com/english/advisories/2008/0570 http://www.vupen.com/english/advisories/2008/0592 http://www.vupen.com/english/advisories/2008/1412 http://www.vupen.com/english/advisories/2008/2268 http://www.vupen.com/english/advisories/2008/2780 http://www.vupen.com/english/advisories/2009/2172 https://bugzilla.redhat.com/show_bug.cgi?id=431660 https://exchange.xforce.ibmcloud.com/vulnerabilities/40505 https://issues.rpath.com/browse/RPL-2223 https://issues.rpath.com/browse/RPL-2503 https://usn.ubuntu.com/581-1/ https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00371.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00632.html https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html http://ftp.gnome.org/pub/gnome/sources/glib/2.14/glib-2.14.6.news http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00008.html http://pcre.org/changelog.txt http://secunia.com/advisories/28923 http://secunia.com/advisories/28957 http://secunia.com/advisories/28960 http://secunia.com/advisories/28985 http://secunia.com/advisories/28996 http://secunia.com/advisories/29027 http://secunia.com/advisories/29048 http://secunia.com/advisories/29175 http://secunia.com/advisories/29267 http://secunia.com/advisories/29282 http://secunia.com/advisories/30048 http://secunia.com/advisories/30345 http://secunia.com/advisories/31326 http://secunia.com/advisories/32222 http://secunia.com/advisories/32746 http://secunia.com/advisories/36096 http://security.gentoo.org/glsa/glsa-200803-24.xml http://security.gentoo.org/glsa/glsa-200811-05.xml http://support.apple.com/kb/HT3216 http://support.apple.com/kb/HT3757 http://wiki.rpath.com/Advisories:rPSA-2008-0086 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0086 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0176 http://www.debian.org/security/2008/dsa-1499 http://www.mandriva.com/security/advisories?name=MDVSA-2008:053 http://www.openwall.com/lists/oss-security/2008/05/02/2 http://www.php.net/ChangeLog-5.php http://www.securityfocus.com/archive/1/488927/100/0/threaded http://www.securityfocus.com/archive/1/492535/100/0/threaded http://www.securityfocus.com/bid/27786 http://www.securityfocus.com/bid/29009 http://www.securityfocus.com/bid/31681 http://www.securitytracker.com/id?1022674 http://www.us-cert.gov/cas/techalerts/TA09-218A.html http://www.vupen.com/english/advisories/2008/0570 http://www.vupen.com/english/advisories/2008/0592 http://www.vupen.com/english/advisories/2008/1412 http://www.vupen.com/english/advisories/2008/2268 http://www.vupen.com/english/advisories/2008/2780 http://www.vupen.com/english/advisories/2009/2172 https://bugzilla.redhat.com/show_bug.cgi?id=431660 https://exchange.xforce.ibmcloud.com/vulnerabilities/40505 https://issues.rpath.com/browse/RPL-2223 https://issues.rpath.com/browse/RPL-2503 https://usn.ubuntu.com/581-1/ https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00371.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00632.html https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00181.html

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.5

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2008-0674 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 09, 2025 MODIFIED

Vulnerability data or affected products updated.

February 18, 2008 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.