pcregrep in PCRE prior to 8.38 mishandles the -q option for binary files, which might allow remote malicious users to obtain sensitive information via a crafted file, as demonstrated by a CGI script that sends stdout data to a client.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
pcre perl compatible regular expression library |
||
fedoraproject fedora 22 |
||
php php |