Vulnerability Intelligence Report
CVE-2007-5116
Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.
No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:4.83%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| debian | debian_linux | 3.1, 4.0 |
| mandrakesoft | mandrake_linux | 2007, 2007.1, 2008.0 |
| mandrakesoft | mandrake_linux_corporate_server | 3.0, 4.0 |
| redhat | enterprise_linux | 3.0, 4.0, 5.0, 1.0 |
| redhat | enterprise_linux_desktop | 3.0, 4.0 |
| redhat | linux_advanced_workstation | 2.1 |
| rpath | rpath_linux | 1 |
| larry_wall | perl | 5.8.0, 5.8.1, 5.8.3, 5.8.4, 5.8.4.1, 5.8.4.2, 5.8.4.2.3, 5.8.4.3, 5.8.4.4, 5.8.4.5, 5.8.6 |
| mandrakesoft | mandrake_multi_network_firewall | 2.0 |
| openpkg | openpkg | current |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
4.830%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2007-09-27T00:00:00 |
| Published | 2007-11-07T20:00:00 |
| Patch Date | 2007-11-05 |
| Last Updated | 2024-08-07T15:17:28 |
Community Chatter & Buzz