CVE:CVE-2006-7225
CNNVD:CNNVD-200712-011
Perl-Compatible Regular Expression (PCRE) library版本之前的版本6.7 allows 见机行事的攻击者可以借助一个包含一个"畸形POSIX字符类别"的固定公式造成拒绝服务, 例如可以借助一个无效字符[[序列。
solution:Upgrade perl pcre to a higher version than 0.91,0.92,0.93,0.94,0.95,0.96,0.97,0.98,0.99,1.00,1.01,1.02,1.03,1.04,1.05,1.06,1.07,1.08,1.09,2.0,2.01,2.02,2.03,2.04,2.05,2.06,2.07,2.08,3.0,3.1,3.2,3.3,3.4,3.5,3.6,3.7,3.8,3.9,4.0,4.1,4.2,4.3,4.4,4.5,5.0,6.0,6.1,6.2,6.3,6.4,6.5,6.6,and avoid the version 0.91,0.92,0.93,0.94,0.95,0.96,0.97,0.98,0.99,1.00,1.01,1.02,1.03,1.04,1.05,1.06,1.07,1.08,1.09,2.0,2.01,2.02,2.03,2.04,2.05,2.06,2.07,2.08,3.0,3.1,3.2,3.3,3.4,3.5,3.6,3.7,3.8,3.9,4.0,4.1,4.2,4.3,4.4,4.5,5.0,6.0,6.1,6.2,6.3,6.4,6.5,6.6
solution:Upgrade atrium_software mercur_messaging_2005 to a higher version than 5.0_sp3,and avoid the version 5.0_sp3