CVE-2007-5116

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-11-07 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.

Affected products

Larry Wall Perl: 5.8.0, 5.8.1, 5.8.3, 5.8.4, 5.8.4.1, 5.8.4.2 (+5)
Mandrakesoft Mandrake Multi Network Firewall: 2.0
Openpkg: current
Red Hat Enterprise Linux: 1.0

References

http://docs.info.apple.com/article.html?artnum=307179
http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
http://lists.vmware.com/pipermail/security-announce/2008/000002.html
http://marc.info/?l=bugtraq&m=120352263023774&w=2
http://secunia.com/advisories/27479
http://secunia.com/advisories/27515
http://secunia.com/advisories/27531
http://secunia.com/advisories/27546
http://secunia.com/advisories/27548
http://secunia.com/advisories/27570
http://secunia.com/advisories/27613

Get alerted when CVE-2007-5116 or the next vulnerability affects your stack