K16984 : PCRE library vulnerability CVE-2015-2326

Security Advisory Description

PCRE library is prone to a vulnerability which leads to Heap overflow. Without enough bound checking inside pcre_compile2(), the heap memory could be overflowed via a crafted regular expression. Since PCRE library is widely used, this vulnerability should affect many applications. An attacker may exploit this issue to execute arbitrary code in the context of the user running the affected application. (CVE-2015-2326)

Impact

An attacker may be able to execute arbitrary code in the context of the user running the affected application.