Every CVE Search/ Get API key

CVE-2007-1660

Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes...

6.8 MediumFix available

Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Exploit likelihood

4.08%Down 0.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Record
CVE-2007-1660
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Record
CVE-2007-1660
Updated
2026-11-02
EUVDEUVD-2007-1654 No score

Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Record
EUVD-2007-1654
Updated
2026-11-03
GitHub AdvisoriesGHSA-v294-5p22-v3ph No score

Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes...

Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Record
GHSA-v294-5p22-v3ph
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Record
CVE-2007-1660
Updated
2026-11-02
OSVDEBIAN-CVE-2007-1660 No score

Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character class", which triggers a buffer overflow that allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Record
DEBIAN-CVE-2007-1660
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glib2.0
Debian:12
 before 2.14.3-1
2.14.3-1
glib2.0
Debian:13
 before 2.14.3-1
2.14.3-1
glib2.0
Debian:14
 before 2.14.3-1
2.14.3-1
pcre3
Debian:12
 before 7.3-1
7.3-1
pcre3
Debian:3.1
From an advisory covering 7 CVEs
 before 4.5+7.4-1, plus listed versions
4.5-1.24.5-1.2sarge1
4.5+7.4-1
pcre3
Debian:4.0
From an advisory covering 7 CVEs
 before 6.7+7.4-2, plus listed versions
6.7+7.4-16.7-1
6.7+7.4-2
kazehakase
Debian:4.0
From an advisory covering 10 CVEs
 before 0.4.2-1etch1, plus listed versions
0.4.2-1
0.4.2-1etch1
pcre3
Debian:5.0
From an advisory covering 7 CVEs
 before 6.7+7.4-2+lenny1
6.7+7.4-2+lenny1
pcre
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
 before 0:6.6-2.el5_0.1
0:6.6-2.el5_0.1
pcre-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
 before 0:6.6-2.el5_0.1
0:6.6-2.el5_0.1
Show 70 moreShow less
Affected packages
PackageAffectedFixed
pcre-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 2 CVEs
 before 0:6.6-2.el5_0.1
0:6.6-2.el5_0.1
pcre
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:6.6-2.el5_0.1
0:6.6-2.el5_0.1
pcre-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 2 CVEs
 before 0:6.6-2.el5_0.1
0:6.6-2.el5_0.1
pcre
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:6.6-2.el5_0.1
0:6.6-2.el5_0.1
pcre-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:6.6-2.el5_0.1
0:6.6-2.el5_0.1
pcre-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 2 CVEs
 before 0:6.6-2.el5_0.1
0:6.6-2.el5_0.1
pcre
Red Hat:enterprise_linux:4::as
 before 0:4.5-4.el4_5.1
0:4.5-4.el4_5.1
pcre-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:4.5-4.el4_5.1
0:4.5-4.el4_5.1
pcre-devel
Red Hat:enterprise_linux:4::as
 before 0:4.5-4.el4_5.1
0:4.5-4.el4_5.1
pcre
Red Hat:enterprise_linux:4::desktop
 before 0:4.5-4.el4_5.1
0:4.5-4.el4_5.1
pcre-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:4.5-4.el4_5.1
0:4.5-4.el4_5.1
pcre-devel
Red Hat:enterprise_linux:4::desktop
 before 0:4.5-4.el4_5.1
0:4.5-4.el4_5.1
pcre
Red Hat:enterprise_linux:4::es
 before 0:4.5-4.el4_5.1
0:4.5-4.el4_5.1
pcre-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:4.5-4.el4_5.1
0:4.5-4.el4_5.1
pcre-devel
Red Hat:enterprise_linux:4::es
 before 0:4.5-4.el4_5.1
0:4.5-4.el4_5.1
pcre
Red Hat:enterprise_linux:4::ws
 before 0:4.5-4.el4_5.1
0:4.5-4.el4_5.1
pcre-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:4.5-4.el4_5.1
0:4.5-4.el4_5.1
pcre-devel
Red Hat:enterprise_linux:4::ws
 before 0:4.5-4.el4_5.1
0:4.5-4.el4_5.1
pcre
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:3.9-10.4
0:3.9-10.4
pcre-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:3.9-10.4
0:3.9-10.4
pcre-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 2 CVEs
 before 0:3.9-10.4
0:3.9-10.4
pcre
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:3.9-10.4
0:3.9-10.4
pcre-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:3.9-10.4
0:3.9-10.4
pcre-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 2 CVEs
 before 0:3.9-10.4
0:3.9-10.4
pcre
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:3.9-10.4
0:3.9-10.4
pcre-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:3.9-10.4
0:3.9-10.4
pcre-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 2 CVEs
 before 0:3.9-10.4
0:3.9-10.4
pcre
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:3.9-10.4
0:3.9-10.4
pcre-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:3.9-10.4
0:3.9-10.4
pcre-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 2 CVEs
 before 0:3.9-10.4
0:3.9-10.4
pcre
Red Hat:enterprise_linux:2.1::as
From an advisory covering 2 CVEs
 before 0:3.4-2.4
0:3.4-2.4
pcre-devel
Red Hat:enterprise_linux:2.1::as
From an advisory covering 2 CVEs
 before 0:3.4-2.4
0:3.4-2.4
pcre
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 2 CVEs
 before 0:3.4-2.4
0:3.4-2.4
pcre-devel
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 2 CVEs
 before 0:3.4-2.4
0:3.4-2.4
pcre
Red Hat:enterprise_linux:2.1::es
From an advisory covering 2 CVEs
 before 0:3.4-2.4
0:3.4-2.4
pcre-devel
Red Hat:enterprise_linux:2.1::es
From an advisory covering 2 CVEs
 before 0:3.4-2.4
0:3.4-2.4
pcre
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 2 CVEs
 before 0:3.4-2.4
0:3.4-2.4
pcre-devel
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 2 CVEs
 before 0:3.4-2.4
0:3.4-2.4
php
Red Hat:enterprise_linux:2.1::as
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-devel
Red Hat:enterprise_linux:2.1::as
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-imap
Red Hat:enterprise_linux:2.1::as
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-ldap
Red Hat:enterprise_linux:2.1::as
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-manual
Red Hat:enterprise_linux:2.1::as
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-mysql
Red Hat:enterprise_linux:2.1::as
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-odbc
Red Hat:enterprise_linux:2.1::as
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-pgsql
Red Hat:enterprise_linux:2.1::as
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-devel
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-imap
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-ldap
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-manual
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-mysql
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-odbc
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-pgsql
Red Hat:enterprise_linux:2.1::aw
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php
Red Hat:enterprise_linux:2.1::es
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-devel
Red Hat:enterprise_linux:2.1::es
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-imap
Red Hat:enterprise_linux:2.1::es
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-ldap
Red Hat:enterprise_linux:2.1::es
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-manual
Red Hat:enterprise_linux:2.1::es
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-mysql
Red Hat:enterprise_linux:2.1::es
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-odbc
Red Hat:enterprise_linux:2.1::es
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-pgsql
Red Hat:enterprise_linux:2.1::es
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-devel
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-imap
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-ldap
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-manual
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-mysql
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-odbc
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20
php-pgsql
Red Hat:enterprise_linux:2.1::ws
From an advisory covering 7 CVEs
 before 0:4.1.2-2.20
0:4.1.2-2.20

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
aliases
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-1660 is a medium vulnerability (CVSS 6.8) in Pcre, published November 5, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.08%, the 90th percentile. Fixed in glib2.0 2.14.3-1.

References

Show 104 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open