CVEs-PoC/2007/CVE-2007-4772.md

CVE-2007-4772

Description

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted regular expression.

POC

Reference

• http://www.vmware.com/security/advisories/VMSA-2008-0009.html
• http://www.vmware.com/security/advisories/VMSA-2008-0009.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/vmmaltsev/13.1