UnratedFix available
gnumeric, goffice and 1 more products — security advisory
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
- Products
- gnumeric, goffice, pcre3
- Affected versions
- Not specified
- Fixed versions
- 0.1.0-3, 1.5.1-1, 6.3-1
- CVEs
- CVE-2005-2491
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 20:46 UTC · Revision 1
Source evidence
Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.
osv:DEBIAN-CVE-2005-2491
gnumeric
Fixed versions: 1.5.1-1
gnumeric
Fixed versions: 1.5.1-1
gnumeric
Fixed versions: 1.5.1-1
goffice
Fixed versions: 0.1.0-3
goffice
Fixed versions: 0.1.0-3
goffice
Fixed versions: 0.1.0-3
pcre3
Fixed versions: 6.3-1
Complete source record
{
"id": "eaad91fb55bf3ebc38c93a4728f4afe2e362dec9e0483dbefad9ca1cf77b3f9a",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2005-2491",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2005-2491",
"summary": "Integer overflow in pcre_compile.c in Perl Compatible Regular Expressions (PCRE) before 6.2, as used in multiple products such as Python, Ethereal, and PHP, allows attackers to execute arbitrary code via quantifier values in regular expressions, which leads to a heap-based buffer overflow.",
"evidence": "osv:DEBIAN-CVE-2005-2491",
"products": [
{
"name": {
"value": "gnumeric",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.5.1-1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "gnumeric",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.5.1-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "gnumeric",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.5.1-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "goffice",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.1.0-3",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "goffice",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.1.0-3",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "goffice",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.1.0-3",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pcre3",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "6.3-1",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2005-2491",
"aliases": [
"DEBIAN-CVE-2005-2491"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.5.1-1"
}
]
}
],
"package": {
"name": "gnumeric",
"purl": "pkg:deb/debian/gnumeric?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2005-2491.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.5.1-1"
}
]
}
],
"package": {
"name": "gnumeric",
"purl": "pkg:deb/debian/gnumeric?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2005-2491.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.5.1-1"
}
]
}
],
"package": {
"name": "gnumeric",
"purl": "pkg:deb/debian/gnumeric?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2005-2491.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.1.0-3"
}
]
}
],
"package": {
"name": "goffice",
"purl": "pkg:deb/debian/goffice?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2005-2491.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.1.0-3"
}
]
}
],
"package": {
"name": "goffice",
"purl": "pkg:deb/debian/goffice?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2005-2491.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.1.0-3"
}
]
}
],
"package": {
"name": "goffice",
"purl": "pkg:deb/debian/goffice?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2005-2491.json"
},
"ecosystem_specific": {
"urgency": "unimportant"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "6.3-1"
}
]
}
],
"package": {
"name": "pcre3",
"purl": "pkg:deb/debian/pcre3?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2005-2491.json"
},
"ecosystem_specific": {
"urgency": "medium"
}
}
],
"modified": "2026-10-23T03:47:38.191334665Z",
"provider": "osv",
"upstream": [
"CVE-2005-2491"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2005-2491"
]
},
"related_cves": [
{
"value": "CVE-2005-2491",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 412054,
"published_at": "2005-08-23T04:00:00+00:00"
}