high7.5Public exploit code
CVE-2004-2286
Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ActivePerl 5.x / Larry Wall Perl 5.x - Duplication Operator Integer Overflow2004-05-18 · dos · multiple · Verified
Impact
Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Activestate | Activeperl | Versions 5.6.1, 5.6.1.630, 5.6.2, 5.6.3, 5.7.1, 5.7.2 |
| Larry Wall | Perl | Versions 5.3, 5.4, 5.4.5, 5.5, 5.5.3, 5.6 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0878.html
- http://www.securityfocus.com/bid/10380
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16224
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0878.html
- http://www.securityfocus.com/bid/10380
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16224