CVE-2005-4872 – pcre incorrect memory requirement computation

https://notcve.org/view.php?id=CVE-2005-4872

Perl-Compatible Regular Expression (PCRE) library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service (crash) via a regular expression with a large number of named subpatterns, which triggers a buffer overflow. NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split. • http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html http://scary.beasts.org/security/CESA-2007-006.html http://secunia.com/advisories/27582 http://secunia.com/advisories/27773 http://secunia.com/advisories/27869 http://secunia.com/advisories/28658 http://support.avaya.com/elmodocs2/security/ASA-2007-493.htm http://www.mandriva.com/security/advisories?name=MDVSA-2008:030 http://www.novell.com/linux/security/advisories/2007_62_pcre.html http://www.pcre.org& • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •