Regular Expression Backtracking Issue in PCRE Library Affecting Multiple Vendors

CVE-2007-1661

What is CVE-2007-1661?

The Perl-Compatible Regular Expression (PCRE) library, prior to version 7.3, displays a vulnerability due to excessive backtracking when matching specific input characters against certain regex patterns in non-UTF-8 mode. This flaw may enable attackers to exploit the library, leading to potential disclosure of sensitive information or causing a denial of service by crashing the application. Notable patterns affected include "\X?\d" and "\P{L}?\d", demonstrating how inputs can be manipulated to trigger the vulnerability.

References