Unscored severity · published Apr 13, 2007
CVE-2007-2026
The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted document with a large number of line…
–
CVSS
2.1%
EPSS
No
On KEV
Description
The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported for AMaViS.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
File · Gentoo
4.20 · source: NVD
VS
Virus Scanner · Amavis
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2026
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2026
secunia.com
http://secunia.com/advisories/24918
secunia.com
http://secunia.com/advisories/25394
secunia.com
http://secunia.com/advisories/25544
secunia.com
http://secunia.com/advisories/25578
sourceforge.net
http://sourceforge.net/mailarchive/forum.php?thread_name=755AF709E5B77E6EA58479D5%40foxx.lsit.ucsb.edu&forum_name=amavis-user
www.amavis.org
http://www.amavis.org/security/asa-2007-3.txt
More from Virus Scanner
–
CVE-2002-1109
securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service (CPU consumption) via a malformed TAR file, possibly via an incorrect file…
–
CVE-1999-1512
The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the…