CVE-2015-2305 – regex: heap overflow in regcomp() on 32-bit architectures

https://notcve.org/view.php?id=CVE-2015-2305

19 Mar 2015 — Integer overflow in the regcomp implementation in the Henry Spencer BSD regex library (aka rxspencer) alpha3.8.g5 on 32-bit platforms, as used in NetBSD through 6.1.5 and other products, might allow context-dependent attackers to execute arbitrary code via a large regular expression that leads to a heap-based buffer overflow. Desbordamiento de enteros en la implementación regcomp en la librería Henry Spencer BSD regex (también conocido como rxspencer) alpha3.8.g5 en las plataformas de 32 bits, utilizado en ... • http://blog.clamav.net/2015/04/clamav-0987-has-been-released.html • CWE-190: Integer Overflow or Wraparound •