Search for vulnerabilities
Vulnerability details: VCID-ftes-sc3e-aaae
Vulnerability ID VCID-ftes-sc3e-aaae
Aliases CVE-2007-2026
Summary The gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted document with a large number of line feed characters, which is not well handled by OS/2 REXX regular expressions that use wildcards, as originally reported for AMaViS.
Status Published
Exploitability 0.5
Weighted Severity 7.0
Risk 3.5
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.02203 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.02375 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.027 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.14266 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.14266 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.14266 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.14266 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.14266 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.14266 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.14266 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.14266 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.14266 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.14266 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.14266 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.14266 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.14266 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.18412 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.18412 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
epss 0.18412 https://api.first.org/data/v1/epss?cve=CVE-2007-2026
cvssv2 7.8 https://nvd.nist.gov/vuln/detail/CVE-2007-2026
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2026.json
https://api.first.org/data/v1/epss?cve=CVE-2007-2026
https://bugs.gentoo.org/show_bug.cgi?id=174217
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2026
http://secunia.com/advisories/24918
http://secunia.com/advisories/25394
http://secunia.com/advisories/25544
http://secunia.com/advisories/25578
https://issues.rpath.com/browse/RPL-1311
http://sourceforge.net/mailarchive/forum.php?thread_name=755AF709E5B77E6EA58479D5%40foxx.lsit.ucsb.edu&forum_name=amavis-user
http://www.amavis.org/security/asa-2007-3.txt
http://www.gentoo.org/security/en/glsa/glsa-200704-13.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:114
http://www.securityfocus.com/archive/1/469520/30/6420/threaded
http://www.securityfocus.com/bid/24146
http://www.vupen.com/english/advisories/2007/2071
cpe:2.3:a:amavis:virus_scanner:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:amavis:virus_scanner:*:*:*:*:*:*:*:*
cpe:2.3:a:gentoo:file:4.20:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:gentoo:file:4.20:*:*:*:*:*:*:*
CVE-2007-2026 https://nvd.nist.gov/vuln/detail/CVE-2007-2026
GLSA-200704-13 https://security.gentoo.org/glsa/200704-13
GLSA-201412-11 https://security.gentoo.org/glsa/201412-11
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2007-2026
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.74
EPSS Score 0.02203
Published At March 29, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.