Heap
06-12-07, 17:36
Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to cause a denial of service (error or crash) via a regular expression that involves a "malformed POSIX character class", as demonstrated via an invalid character after a [[ sequence.
More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-7225)
More... (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-7225)