Description

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

Remediation

References

CVE-2007-4772

Related Vulnerabilities

Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2022-26377)

WordPress Plugin Visitors Online by BestWebSoft Cross-Site Scripting (0.9)

MySQL CVE-2012-1697 Vulnerability (CVE-2012-1697)

WordPress Plugin Category Order and Taxonomy Terms Order PHP Object Injection (1.5.2.2)

YOURLS Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2019-14537)

Severity

Medium

Classification

CVE-2007-4772

Tags

Missing Update Known Vulnerabilities