Description

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

Remediation

References

CVE-2007-4772

Related Vulnerabilities

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Unspecified Vulnerability (2.0.40)

WordPress Plugin multi Scheduler Cross-Site Request Forgery (1.0.0)

Drupal Deserialization of Untrusted Data Vulnerability (CVE-2019-6340)

OpenSSL Cryptographic Issues Vulnerability (CVE-2011-5095)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-14726)

Severity

Medium

Classification

CVE-2007-4772

Tags

Missing Update Known Vulnerabilities