CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1026

Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp) in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflow.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.044

EPSS Ranking 88.6%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2008-1026

Apple » Safari » Version: 3

cpe:2.3:a:apple:safari:3
Apple » Safari » Version: 3.1

cpe:2.3:a:apple:safari:3.1
Apple » Mac Os X » Version: 10.4.11

cpe:2.3:o:apple:mac_os_x:10.4.11
Apple » Mac Os X » Version: 10.5.2

cpe:2.3:o:apple:mac_os_x:10.5.2
Apple » Mac Os X Server » Version: 10.4.11

cpe:2.3:o:apple:mac_os_x_server:10.4.11
Apple » Mac Os X Server » Version: 10.5.2

cpe:2.3:o:apple:mac_os_x_server:10.5.2
Microsoft » Windows Vista » Version: N/A

cpe:2.3:o:microsoft:windows_vista:-
Microsoft » Windows Xp » Version: N/A

cpe:2.3:o:microsoft:windows_xp:-
Microsoft » Windows Xp » Version: sp2

cpe:2.3:o:microsoft:windows_xp:sp2
Microsoft » Windows Xp » Version: sp3

cpe:2.3:o:microsoft:windows_xp:sp3
Microsoft » Windows Xp » Version: unknown

cpe:2.3:o:microsoft:windows_xp:unknown

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1026

Products

Pricing

Contact Us